Add option to disable password

Closes #590

I think this is an important accessibility feature for users whose threat model allows it, and who don't want to miss messages because they forgot to log in.