The user can't set the login_password hidden config field as it is the SHA-512 hash of the password, and not the password itself. 
Look at [my auth plugin](https://github.com/Torf/XDM-French-Touch/blob/feature/SystemAuth/System%20Auth/SystemAuth.py) to understand how it works.