Require password from users just once

Bonds early adopters define them in the confirmation process and others
in the signup.
Merge pull request #786 from neighborly/im-password-required

Require password from users just once