copy from cake core, BaseAuthenticate.php
md5 password authentication