Fixed CVE-2018-16984 -- Fixed password hash disclosure to admin "view only" users.

      Thanks Claude Paroz & Tim Graham for collaborating on the patch.

# Conflicts:
#	tests/auth_tests/test_views.py