re-work update_cyptpw to handle multiple hidden auths (CRYPT-PW & MD5-PW)
eliminates memory leak of authinfo too.