If the SimplePasswordHasher still exists why will people be forced to use 'Weak'?