Use custom password encoder

* Use password_hash to store hashed passwords
* Use custom PasswordEncoder
* Show error page if user has no access to the resource