Add passwords, verification, changing; remove username

see assembla-21, see assembla-22