GTNPORTAL-2473 Encrypt password in CookieTokenService and store salted

hashes instead of plain tokens

New JCR mixin node type is used to stay as backwards compatible as
possible.