Add option to ban former passwords

OpenProject Issue: https://www.openproject.org/issues/778