Add user import handling to migration script

* Import users from DB
* Create users for incident_person records with email
* Imported users have random password
Fixes to posts api to save user_id properly
Make posts test check that 'password' isn't returned in response
Fix Users API/Model saving plain text password, instead of hashed