Improvements

• When using the change_password and update_password_hash features, a change password request now works correctly if the password hash cost/algorithm has been updated and the request requires the current password.

• The require_account method no longer retrieves the account twice when using account_password_hash_column and two factor authentication.

• “account retrieved multiple times” warnings when verifying an account are no longer emitted in the case where the account is invalid.

• Performance has been improved slightly when using Roda 3.109+.