normaly, unless you comment it yourself, you have cloak_sha256 loaded. Check your conf to find loadmodule "cloak_sha256"; and uncomment it if it's commented. And look for the cloak-keys block to see if you have well setted 3 random strings in it, or runned ./unrealircd gencloak to generate...