Handle initialPassword and initialHashedPassword for !mutableUsers

In this case, they're equivalent to setting ‘password’ and
‘hashedPassword’ (since there is no distinction between an initial and
non-initial user account state).