Change type of Login.Password from string to Secret

- add NewLogin function
- add PasswordString method to Login
- change Group's AddLogin method to match NewLogin function
- change Database tests to use new version of Group's AddLogin