Get rid of LOWER(). Expose $password tokens.

This is a patch we're maintaining internally right now.
- LOWER() is a performance killer on large scale Drupal sites
- We also need to expose passwords as a token for emailing people a password

(I'm sure the maintainer would probably like to have this rerolled into two patches. I'll try and do that soon. I figured better to get it up sooner rather than later though.)