[http.users] Allow to define user passwords in pillar
[base.users] Forbid users to change password