[webui] Fix change_passwd setting and enable it by default
[dist] update OBS 2.4.2 release notes