fixed: user password and salt length
changed UserManagerLocal#createUser signature

user status is part of the User entity now
added password and salt fields to User entity
password handling in UserManagerBean

* create new user
* change password