refactoring auth class.

system/arr.php

@@ -5,6 +5,8 @@ class Arr {
 	/**
 	 * Get an item from an array.
 	 *
+	 * If the specified key is null, the entire array will be returned.
+	 *
 	 * @param  array   $array
 	 * @param  string  $key
 	 * @param  mixed   $default

system/auth.php

@@ -64,11 +64,7 @@ class Auth {
 
 		if ( ! is_null($user))
 		{
-			// If a salt is present on the user record, we will recreate the hashed password
-			// using the salt. Otherwise, we will just use a plain hash.
-			$password = (isset($user->salt)) ? Hash::make($password, $user->salt)->value : sha1($password);
-
-			if ($user->password === $password)
+			if ($user->password === Hash::make($password, $user->salt)->value)
 			{
 				static::$user = $user;
 
@@ -89,6 +85,7 @@ class Auth {
 	public static function logout()
 	{
 		Session::forget(static::$key);
+
 		static::$user = null;
 	}