move hashPassword to Auth class. it is not auth backend specific

in fact it's used only by mysql auth backend which is built in