Fixed custom-control example

getControl() must return HTML object so it can be rendered without `{$control|noescape}`
Authenticator uses Nette\Security\Passwords