Docs: Changelog: PR numbers

[ci skip]

CHANGELOG.md

@@ -26,15 +26,17 @@ cherry-pick it from the stable branch into master.
     * [#617](https://github.com/binarylogic/authlogic/pull/617) -
       Drop restful_authentication, deprecated in 4.1.0
   * Unlikely to affect anyone
-    * Drop the wordpress crypto provider, deprecated in 4.1.0
+    * [#647](https://github.com/binarylogic/authlogic/pull/647) -
+      Drop the wordpress crypto provider, deprecated in 4.1.0
     * [#618](https://github.com/binarylogic/authlogic/pull/618) -
       Uses `frozen_string_literal`, so assume all strings returned are frozen
     * [#642](https://github.com/binarylogic/authlogic/pull/642) -
       The modules that were mixed into `Authlogic::Session::Base` have been
       inlined and deleted. This only affects you if you were re-opening
       ("monkey-patching") one of the deleted modules, in which case you can
       re-open `Base` instead.
-    * `Session::Base#credentials` now always returns a hash.
+    * [#648](https://github.com/binarylogic/authlogic/pull/648) -
+      `Session::Base#credentials` now always returns a hash.
 * Added
   * None
 * Fixed