A cleaner way to resolve the password mess

This pulls the password out of the bash class and allows users to
actually change their passwords, as the password is only set when
applying userprefs::defaults now.