Use the same password for proposal and role on migration

We use a class variable for this.

Also note that there's no need to remove password from node attributes
as they are in a wrong namespace there anyway, so won't conflict.