 				role = form.role;
 				user = auth.getUserByAccountName(form.accountName);
 				if(!isObject(user)) {
-					user = createObject("component", "DefaultUser").init(ESAPI, accountName);
+					user = createObject("component", "org.owasp.esapi.reference.DefaultUser").init(ESAPI, accountName);
 					newHash = auth.hashPassword(password, accountName);
 					auth.setHashedPassword(user, newHash);
 					user.addRole(role);

				}
			}
		</cfscript>
		
		<form method="post">
			<label for="accountName">
				Account Name

			ESAPI, and can therefore be used to create a username and password that do not comply with the
			username and password strength requirements.
		</p>

		<cfscript>
			if(cgi.request_method == "post") {
				ESAPI = createObject("component", "org.owasp.esapi.ESAPI").init();
				ESAPI.securityConfiguration().setResourceDirectory("../test/resources/");

				if(listLen(form.fieldNames) != 3) {
					writeOutput("<p>Usage: Authenticator accountname password role</p>");
					return;
