Fix cookie time check being incorrect.

Modify the authentication tests so they generate a different HMAC instead of just sending in a bad HMAC.
Change the password hash database column has to a varbinary so we don't have to worry about padding.
Update the UI so use the new endpoints.
Make sure the controller references the POST data instead of GET.
Modify the settings test to do a basic test of the accessor key.