- update user password with new hashing algo on login
- delete initial password from ispconfig sql file

- don't make sql request on invalid arguments in password reset form

Lost on master(!866) ... now on cherry-picked on !1132

with stored username/passwords and ignore the "value" attribute on post.