Add Andreas Tolfsen to CONTRIBUTORS
Drop unused hashlib import
Make sure installer and criticctl can run even without passlib installed

(i.e. for "--auth-mode host" installations on systems where python-passlib
package is not installed and the user selects not to install it when the
Critic installer asks)