Support app passwords.

I'm not 100% sure we want to implement this, since OAuth is usually considered an improvement over app passwords and app passwords are usually only preferred for API access.

Original quest: https://bsky.app/profile/wvgg.co/post/3lhmetfsv422y