cakephp Authentication Vulnerabilities