Move fallback password to server's state file.

A dedicated password file is not necessary as the server already has a
persistent state file.
Update ChangeLog.
Test get_public_server_options().