[Luke Taylor](https://jira.spring.io/secure/ViewProfile.jspa?name=luke) (Migrated from [SEC-2122](https://jira.spring.io/browse/SEC-2122?redirect=false)) said: The tutorial and JavaDoc should be updated to reflect that using BCrypt is the recommended best practice