Fixes #635 by allowing customer passwords to be salted by the primary key, follow up #629 by ensuring that the customer enabled flag is passed to Spring security