Replace deprecated Auth::password() with Security::hash()