I thought SimplePasswordHasher was going away? I don't think we need both Weak and Simple around.