you can generally never rely on the unencrypted password being
present or known to the system anyway - e.g. if you're utilizing SSO,
Liferay will never see the password in order to keep track of it anyway.
That being said, if you're not utilizing SSO, there's a portal.properties
entry session.store.password.
I don't recommend using it, and doing so will open up an attack
vector on your users.
