Moved passwords to thier own table, ahead of implementing client cert auth