BROOKLYN-15: support sha256 passwords for web-console

@sjcorbett @grkvlt can you please review?
Also, properties is misspelt.