Move out htpasswd functions into webutil module

Fixes #8123.

This doesn't remove any functionality from the apache module, but it does allow nginx and other programs to use webutil to change the htpasswd file.

New usage relevant to nginx et al: webutil.useradd and webutil.userdel.