switch passwords hash from md5 to password_hash/verify
minor [ci skip]
AuthController and AdminController renamed