Implement better authentication (#27)

 * requiring ircmaxell/password-compat for PHP < 5.5.0
 * backwards-compatibility with old password styles...

NOTE::: by v1.0.0, cs_authUser should be using PHP's password
hashing/verification exclusively.
[skip ci]