Add attr_encrypted to encrypt user's passwords
[Fixes #46039139] Students accounts can be created
[Fixes #46053461] Can fetch the user's token
[Fixes #46040087] Update actions to accept a user (from token) or legacy params