BROOKLYN-15: support sha256 passwords for web-console
This closes #112