option to secure (hash) worker passwords in database

The next step here would be to add a salt, but this should still be better than storing them plaintext 

(Not because the worker passwords themselves are valuable per se, but rather because many users will probably re-use the same password used elsewhere)

Note that I've made this optional, configured in the config.json by toggling "password.secure" : true. It's false by default for backwards compatibility.