Authentication Settings: Add option to set password validity period

https://www.openproject.org/issues/1347
This only adds the options to the settings, but doesn't enforce expiry.

Integration tests will come with the actual checks, unit tests don't make sense for this.


This also fixes https://www.openproject.org/issues/1400