Added the possibility to disable the password by changing the hash to an empty string in config.php.