OAuth, password method: support old password hashes and add last_visit