Some support for password-less configurations

When a new user is created, perform the initial authentication using a token instead of a password - this way a user can be created without a password without having to subclass Mezzanine's ProfileForm.

Also explicitly indicate that a user has no password by calling ``user.set_unusable_password()`` if the password is blank.

Based on discussion in #809.