MDL-46016 auth_shibboleth: removed misleading comment

Also generated a random string for the password field in case it is ever used.