Change authentication.md to correct error

The hash_hmac function has the arguments in the order "sha256", password, salt. 
Not "sha256", salt, password as is documented.