driver: duplicate password/user object

The driver needs to hold an internal copy of the password,
so the password isn't freed at an inopportune moment.

For symmetry, this commit also takes a reference on the
user object that is passed at the same time.

https://bugzilla.gnome.org/show_bug.cgi?id=752980