At the moment, SSH is always configured to disallow password authentication on the Pi, but this should be optional.