Add test class for DefaultSecurityConfigurationUpgrader
Update UserManagerTest to use PasswordGenerator
Add test to verify detection and upgrade of legacy user password hashes at login time