better handling users passwords

when users are upgraded they get a default password. when users are put
back to user their password is removed.