Update - current Fossil versions no longer store user passwords unencrypted as shown in the "Setting up" section of this article.