[webui] Fix change_passwd setting and enable it by default