Use a password for job queue and session redis

This should be safe to deploy in advance of the server change.

The GettingStarted change (Iab1abc8e) needs to be deployed before the
server change.

Change-Id: Ibc0f49089d39f08fa6b2d42fb6d97bccc0eb32ec