bugfix: hash module is required by auth/Builtin.php