Set DISABLE_PASS as the default, & for when logins are rejected if user pass="".