Reverse include_password defaults for dbconsole
Use HashWithIndifferentAccess for reflections

This prevents a bug where we try to access reflections with string
keys rather than symbols.