add security.properties, update HibernateInterceptor.java to hash the values