Add callback_password to user
Use SecureRandom with more password bits for the actual passwords in users task
Add migration to fill in callback passwords
Rejigger authentication in prep for fernet-rack