Wrap server tests in try-finally block.

Stops server always in finally block.
pbkdf2 based password hases. Tests for cookie auth