1.7 controllerUitTest added sha256Hash to password, corrected token to
token.id