Respect pushover username and secret

The pushover configuration on the legacy branch is all kinds of messed up.

1. The user key was hard-coded
2. When configured, the application token was being used as the user key
3. The hard-coded user key was being used as the application token

This has already been fixed in head, but needed correction in the legacy branch as well.