MBS-357: Use bcrypt hashes to authenticate; remove plain text passwords

This "activates" bcrypt hashes for authentication. The `password` column has
been dropped and replaced by the `bcrypt_password` column, which is also
enforced to be `NOT NULL`. A new authentication credential -
`MusicBrainz::Server::Authentication::Credential` - is used to authenticate
users using the general interface provided by `Authen::Passphrase`.

HA1 hashes for digest authentication are also generated, and regenerated if
users change their passwords/register. The digest authentication realm has been
changed to use the `ha1` attribute of editors, rather than `password`.
MBS-357: Fix tests to have HA1 hashes and cleartext passwords
MBS-357: Fix invalid Perl now that `update_password` takes a name, not an editor object
MBS-357: Fix OAuth tests to specify correct password/HA1
MBS-357: Include a sanitized HA1 in the database dumps
MBS-357: Make sure to use `{CLEARTEXT}mb` as the sanitized `editor.password` value
MBS-357: Label the ha1 column when dumping `editor` table
MBS-357: Make `CreateTables`/export column order match what will be on production

After dropping the password column and renaming the currently-last column
`bcrypt_password`, we will end up with columns ..., password, ha1.
MBS-357: Final test fixes
Merge commit '844d6c9'

* commit '844d6c9': (48 commits)
  MBS-6111: simplify SQL to use only any(?)
  Making nikki happy
  Change wording to make nikki happy
  MBS-4258: (fixup) also translate the dropdown on the preferences page
  Remove unneeded whitespace
  Making "uppercase words" a bit clearer hopefully
  Linking to the IA from the cover art page
  Removing unneeded / wrong extra stuff
  Adding some padding so that lists of artists for each work will be easy to distinguish
  Add a report for ISWCs on several works
  Add some info about *how* to add discIDs to the discID page if empty
  Capitalising these titles according to our title guidelines!
  Making RGs without a type more clearly marked as so in overview
  Remove buggy and pointless-as-merge-info ratings display
  Adding message confirming it works
  Change this to be less weird
  Redirect to profile after admin-editing user
  Fix typo on the RDF
  MBS-6111: update test to specifically ensure darkened takes priority over present
  MBS-6111: test preservation of present/darkened
  ...
Merge branch 'mbs-357-login'

* mbs-357-login:
  MBS-357: Final test fixes
  MBS-357: Make `CreateTables`/export column order match what will be on production
  MBS-357: Label the ha1 column when dumping `editor` table
  MBS-357: Make sure to use `{CLEARTEXT}mb` as the sanitized `editor.password` value
  MBS-357: Include a sanitized HA1 in the database dumps
  MBS-357: Fix OAuth tests to specify correct password/HA1
  MBS-357: Fix invalid Perl now that `update_password` takes a name, not an editor object
  MBS-357: Fix tests to have HA1 hashes and cleartext passwords
  MBS-357: Use bcrypt hashes to authenticate; remove plain text passwords
Merge branch 'master' into beta

* master:
  MBS-357: Final test fixes
  MBS-357: Make `CreateTables`/export column order match what will be on production
  MBS-357: Label the ha1 column when dumping `editor` table
  MBS-357: Make sure to use `{CLEARTEXT}mb` as the sanitized `editor.password` value
  MBS-357: Include a sanitized HA1 in the database dumps
  MBS-357: Fix OAuth tests to specify correct password/HA1
  MBS-357: Fix invalid Perl now that `update_password` takes a name, not an editor object
  MBS-357: Fix tests to have HA1 hashes and cleartext passwords
  MBS-357: Use bcrypt hashes to authenticate; remove plain text passwords