Authentication now uses a password hash configurable in Config.php - Config.hashFunction = 'sha1'