Fix PasswordStragegy to use config options

* Now uses Monban.config.user_lookup_field
* Now uses Monban.config.user_token_field