no issue - support ends today - see https://github.com/nodejs/Release - removed `use strict`
no issue - move password hashing and password comparison to lib/security/password - added two unit test - FYI: password hashing takes ~100ms - we could probably mock password hashing in certain cases when unit testing