Replaced deprecated AuthComponent::password with Security::hash