new version: see the jira roadmap
deploy: see a comment by jgerlach or use the gpd
login with password: adapt the webapp slightly to e.g. use the authentication framework of you servlet/j2ee engine and pass the userid to jbpm. Not until jBPM get some integration wit a real usermanagement system takes place (e.g. the one provided with the portal) this will be proviced. So for now you have to do it yourself.