3.x - security: replace unencrypted cookie auth tokens with verified, work-factor-bounded HMAC-SHA256 tokens#806

markstory merged 3 commits into

3.xcakephp/authentication:3.xfrom

backport-805cakephp/authentication:backport-805Copy head branch name to clipboard