Passwords are set on the server with python src/webapp/add_user.py <email>.