Change password structure to be key/value rather than array.

This structure is easier to allow editing on.  Arrays are difficult to
patch, but key/value is pretty simple.