Mention setup.py develop --upgrade also in release notes.

This commit sponsored by Christoph Schumacher.  Thank you!
only check password if there is a store_hash
need to use .get('messages') to not get a keyerror
skip openid tests if python-openid isn't installed
Merge branch 'misc' into auth_refactor