Merge "Disallow User::setPassword() on users not in database"