Fixed password hashing to use Apache Base64Encoder instead of Sun's deprecated one. Also moved all password handling to LoginHandler