issue #44: provide password callback

instead of simply passing a password string around, TorControlProtocol
now accepts a password callable that may return a string or a Deferred
which callbacks with a string that is the password. This would allow
one to query the user for this if needed.
add note about password callbacks