MDL-42097 fix handling of passwords when creating new users
MDL-42097 auth: Webservice auth uses tokens only not passwords