[1.0.0] Refactor the AuthzId usage and remove the password from the token.

[ChadSikorra]

Two refactors going on here that touch a lot of files:

1. Use AuthzID in the spots that are relevant so we aren't passing raw strings around.
2. Remove the password from the token. It was previously used in the old proxy server setup. But it's no longer needed and should not be stored on the token.