Accept a hashed password on Auth::getMobileSession

In some scenarios you might all ready have a hashed password and you don't want it to be hashed again within the method. I've added an additional, optional parameter to the Auth::getMobileSession method. When set to false it will not hash the password.
It defaults to true, to make sure it's backwards compatible.

PS: I know this PR is long overdue ;)