BROOKLYN-15: support sha256 passwords for web-console

@sjcorbett @grkvlt can you please review?
Message doesn't match real output.