Aaaand we are almost stable again

However, this comes at the cost of password safty.. I sliced down the
password handling to it being set at the time of registering, no
SSO-password.. I also lowered password encryption to md5-hex to be able
to speed up integration testing with JBoss.