Using password encoder. Dropped csrf for now. Split out user stuff into UserController. Got rid of equals/hashcode overrides in models as this was screwing up hibernate. Fix problem with user add role.