Require password for authentication

Add a password field to the user model, and require the password when
creating a session (logging the user in).  Add a password field to the
login page in the UI.