Merge pull request #520 from ntoniazzi/bug-apr1crypt

Fix APR1_MD5::check call

modules/authcrypt/lib/Auth/Source/Htpasswd.php

@@ -80,7 +80,7 @@ class sspmod_authcrypt_Auth_Source_Htpasswd extends sspmod_core_Auth_UserPassBas
 				}
 
 				// Apache's custom MD5
-				if(APR1_MD5::check($crypted, $password)) {
+				if(APR1_MD5::check($password, $crypted)) {
 					SimpleSAML\Logger::debug('User '. $username . ' authenticated successfully');
 					return $attributes;
 				}