I've never liked the chain-specific exception to having to set a password. Also it conflicts with #6388 which makes it generally valid to set no password (as it then enables random cookie authentication).
This pull removes the flag, so that all chains are regarded the same. It also adapts the tests so that they no longer rely on the previous behavior.
utACK
Tested above of #6388.
ACK.
ACK
Hmm, this username==password here is sub-optiomal
Yes. Thinking of it, it is kind of a lame check. Maybe better to just remove it.
ACK
I've never liked the chain-specific exception to having to set a
password. It gives issues with #6388 which makes it valid to
set no password in every case (as it enables random cookie authentication).
This pull removes the flag, so that all chains are regarded the same.
It also removes the username==password test, which doesn't provide any
substantial extra security.