 			ESAPI, and can therefore be used to create a username and password that do not comply with the
 			username and password strength requirements.
 		</p>
-		
+
 		<cfscript>
 			if(cgi.request_method == "post") {
 				ESAPI = createObject("component", "org.owasp.esapi.ESAPI").init();
-				ESAPI.securityConfiguration().setResourceDirectory(expandPath("../../../../test/resources/"));
-			
+				ESAPI.securityConfiguration().setResourceDirectory("../test/resources/");
+
 				if(listLen(form.fieldNames) != 3) {
 					writeOutput("<p>Usage: Authenticator accountname password role</p>");
 					return;

				role = form.role;
				user = auth.getUserByAccountName(form.accountName);
				if(!isObject(user)) {
					user = createObject("component", "DefaultUser").init(ESAPI, accountName);
					newHash = auth.hashPassword(password, accountName);
					auth.setHashedPassword(user, newHash);
					user.addRole(role);

				}
			}
		</cfscript>

		<form method="post">
			<label for="accountName">
				Account Name
