[1.5.x] Fixed #20078: don't allow filtering on password in the user admin.

Backport of 9e462f810194800af30ea19a6fb8ac5697d839b4 from master.