Make number of banned former passwords configurable

Also group settings into fieldsets on the authentication settings page.