Remove hashing of blowfish secret

New code doesn't have problems with longer secrets.

Signed-off-by: Michal Čihař <michal@cihar.com>

libraries/plugins/auth/AuthenticationCookie.php

@@ -600,8 +600,7 @@ class AuthenticationCookie extends AuthenticationPlugin
         if (empty($GLOBALS['cfg']['blowfish_secret'])) {
             return $this->_getSessionEncryptionSecret();
         } else {
-            // apply md5() to work around too long secrets (returns 32 characters)
-            return md5($GLOBALS['cfg']['blowfish_secret']);
+            return $GLOBALS['cfg']['blowfish_secret'];
         }
     }
 

test/classes/plugin/auth/AuthenticationCookieTest.php

@@ -1053,7 +1053,7 @@ class AuthenticationCookieTest extends PMATestCase
         $result = $method->invoke($this->object, null);
 
         $this->assertEquals(
-            md5('notEmpty'),
+            'notEmpty',
             $result
         );
     }