feat(core) Refactor userPassword template storing to something more sensible

The new format is method|locked|password, which makes a lot more sense
 than storing a bogus hash for templates, and fixes problems with clear
 method.

The code can still read the old format so transition should be fine.

issue #6163