fixed hash comparision on LocalStrategy Authentication, more specific package versions