Updated to use bcrypt. Note that unlike http://grails-plugins.github.io/grails-spring-security-core/guide/single.html#personClass, we don't embed encryption in the user class (yet) but we do use its pattern when bootstrapping and creating users. Checked that newly created users also authenticate. Our old workaround needs to be retracted, and the existing admin user and role associations removed.