added password($raw) and verifyPassword($raw, $hash) methods
Controller::createErrorResponse becomes public