Add passwords, verification, changing; remove username

see assembla-21, see assemmbla-22