New attribute type Password
Make users CMS objects, too.
Remove obsolete DBIC auth implementation