MDL-46016 auth_shibboleth: updated misleading comment

Also generated a random string for the password field in case it is ever used.