You could wrap your passwords in a Hash::make(md5($password)) like I done with most of my hotels, if @
saamus wants compatibility with current-hotels that's the way to go, also by adding a 'is_bcrypt' column to users, so it won't hash the password over itself after being updated.
That being said, hopefully people appreciate just how difficult coding something like this would be - as it's not solely the backend programming you need to do, but also heavy-frontend logic and doing a legitimate reverse-engineer of the actual source-code.
Great job, man. I don't have much time to review your code - but I trust you're still using Lumen and it helped as much as its helped myself in the past
Edit
For those confused on what
Binaries are, it's the files installed via Composer.
Download This
You must be registered to see links
Go to your web root (C:\inetpub\wwwroot for most
Open up your cmd
Run the command
composer install