implemented the password hashing mechanism. The mechanism still needs to be switched on in Authenticator and the UserManager... the UserManager.makeEntity needs to be refactored so we can hash the password from the given JSON.
merged in dev-core-feature-passwordhash into dev-core. This enables SHA256 hashing on the User.password field. Hashing is performed in UserManager.makeEntity(). At this time, the password cannot be changed or updated once the user is created. Also, fixed a bug in UserManagerTest.testMakeEntity such that it uses assertTrue and the User.equals instead of the default assertEquals.