Fix: don't enable login_required on sites that used to use an access_password