Global admin password improvements

[Guite]

• Store admin password in multisitessites table as hash instead of cleartext
• Allow setting a completely new password for a certain site / for all sites

[shefik]

Allow a master admin per site, and separate groups per site.