Update todo list regarding authentication
Add password check to user class
Revise server-side authentication

We no longer use twisted's cred system.
Throw out last pieces of twisted.cred

They are no longer required, see previous commit.