leverage MessageDigestPasswordEncoder