Assume an OCTServer supports passwordAuthentication by default.

`supportsPasswordAuthentication` should default to `YES` to support enterprise servers that have the `/meta` endpoint but don't yet have the `verifiable_password_authentication` key.