WebLoginCommand is now an extra instance for hashers etc.