! update sha1.js to the 2.2 revision

Signed-off-by: Spuds <spuds@spudsdesign.com>
! Use sha256 functions for js

Signed-off-by: Spuds <spuds@spudsdesign.com>
! Use phpass for password hashing

Signed-off-by: Spuds <spuds@spudsdesign.com>
! call sha256.js in place of sha1.js

Signed-off-by: Spuds <spuds@spudsdesign.com>
! update script.js to submit a sha256 hash in place of the sha1 hash
! use the sha256.js utf8 to 8bit conversion in place of the php_to8bit

Signed-off-by: Spuds <spuds@spudsdesign.com>
! update register controller to use new cookie signature
! update register controller to use the new phpass password checking

Signed-off-by: Spuds <spuds@spudsdesign.com>
! updates to check for longer sha256 hash 64 from 40 char

Signed-off-by: Spuds <spuds@spudsdesign.com>
! more 40->64 conversion and sha1 -> sha256

Signed-off-by: Spuds <spuds@spudsdesign.com>
! Update the main auth controller to use sha256 and phpass hashing
! now the hash saved in the db is not directly used in a == sha comparison
but instead in a password check function using crypt (salted, stretched)

Signed-off-by: Spuds <spuds@spudsdesign.com>
! updates in the profile functions for checking and updating passwords
from sha1 to phpass (ie blowfish)

Signed-off-by: Spuds <spuds@spudsdesign.com>
! update password reminder functions

Signed-off-by: Spuds <spuds@spudsdesign.com>
! sub files that need updating as well

Signed-off-by: Spuds <spuds@spudsdesign.com>
! prevent flooding us with really long passwords

Signed-off-by: Spuds <spuds@spudsdesign.com>
! add in some normal sha256 conversions, the old ones were pre 5.1 and
will not hash to a proper sha256

Signed-off-by: Spuds <spuds@spudsdesign.com>
! action_salt is not called, was added back in 2005 and never used AFAIK

Signed-off-by: Spuds <spuds@spudsdesign.com>
! update SSI validation

Signed-off-by: Spuds <spuds@spudsdesign.com>
! lets try to centralize the hash creation and pw check

Signed-off-by: Spuds <spuds@spudsdesign.com>
! use new central function
! move otherpassword creation to its own private function

Signed-off-by: Spuds <spuds@spudsdesign.com>
! move profile areas to use consolidated password functions

Signed-off-by: Spuds <spuds@spudsdesign.com>
! additional change over to the validateLoginPassword function

Signed-off-by: Spuds <spuds@spudsdesign.com>