use Illuminate\Contracts\Auth\Authenticatable contract to get the use…

…r password (#17965)

* changed from field access to getAuthPassword() method

src/Illuminate/Session/Middleware/AuthenticateSession.php

@@ -47,7 +47,7 @@ public function handle($request, Closure $next)
             $this->storePasswordHashInSession($request);
         }
 
-        if ($request->session()->get('password_hash') !== $request->user()->password) {
+        if ($request->session()->get('password_hash') !== $request->user()->getAuthPassword()) {
             $this->logout($request);
         }
 
@@ -69,7 +69,7 @@ protected function storePasswordHashInSession($request)
         }
 
         $request->session()->put([
-            'password_hash' => $request->user()->password,
+            'password_hash' => $request->user()->getAuthPassword(),
         ]);
     }