BROOKLYN-15: support sha256 passwords for web-console

@sjcorbett @grkvlt can you please review?
Can we exit with a non-zero code when we abort?