This is a part of my Guide to setting up the CakePHP auth component series. What is the difference between the Auth component and the ACL component in CakePHP? User password is "double hashed on edit when using the Cakephp Auth component