fix mongodb-based user creation

two bugs in one, don't SHA-256 the new password in the web interface anymore
use SHA-1 credential matcher in password authenticator in the server

fixes Graylog2/graylog2-web-interface#432