fixed character encoding issues with the Authenticator by enforcing UTF-8. We should probably do this globally, if possible. Migrated SessionTest to the Interfaces project because Session was moved there as well. Enabled Exposed annotation for GSON in Session because it serializes a user. This should be fixed once we refactor serialization. Also, fixed a few Authenticator test cases that were not hashing passwords.