Masked the password fields on the user create and update jspx pages
Modified the login to check credentials against the user table in the database instead of storing credentials in the XML
Added code to the User bean to hash a password before saving it to the database