Password removed from hibernate.cfg