LDEV-3697: Choosing user from autocomplete list displays results only for him/her. Entering generic query displays results for all matched users. Major clean up: rewrite methods for finding users and move them from UserManagementService to UserDAO.
LDEV-3578: Convert passwords from sha1 to sha256 with salt after successful authentication and on password change. Remove password hashing in browser. Change internal authentication mechanism for LoginRequestServlet and LoginAsAction.