update Utility/Security.php

This way a misconfiguration of Security::hash() through $salt => true is impossible.