auth-local should not show passwords in server log

* I updated the auth-local module to not show passwords in the server log
* Also clarified that the login form does not "encrypt" passwords,
  just computes a checksum of it.