GTNPORTAL-2473 Encrypt password in CookieTokenService and store salted
hashes instead of plain tokens

New JCR mixin node type is used to stay as backwards compatible as
possible.
GTNPORTAL-2828 CookieTokenService initialization too slow