Returns true if and only if the current user's password matches STRING
Never display a password
Allows the current user to see all their own attributes and everyone else to see their username.
Allows the current user to update any of their own attributes except whether or not their email has been confirmed.
Passes everything else off to the superclass.
Returns the user's unique authentication token. If the user doesn't have one, sets one and returns it.
