Don't sanitize mysql password when updating from setup

Or any of the other mysql configuration items for that matter... it's irrelevant if HTML tags or characters make their way into these config vars.

Fixes #842