1. add pbkdf2 secure password hasher
2. acl table should like |username|topic|rw| in mysql where rw=1 means
read, rw=2 means write, where username = '*' means any user's username in this
change
3. note plugin.config no work here, but this is a working
diff when default value is right
