Updates for compatibility with v2.4

[oilee80]

The AuthComponent::password is being deprecated and calling it causes errors if you use 'blowfish' as Security::$hashType. If it needs to be a specific hash then it should be passed in as a second parameter

[webtechnick]

Thank you for your contribution.