updated realm to use hashed credentials matcher