Fixes #200 - Move the around the Customer and admin password encoders to application contexts that actually need it, make the SessionFixationProtectionFilter use its own encryption module rather than share the credit card one