Do not allow a user to change their password if local logins are disabled

Details for this request can be found here: https://meta.discourse.org/t/ability-to-disallow-changing-passwords/17961

With this change, a user can only change their password if the site is NOT using SSO **AND** local logins are enabled.  Otherwise, the password change option will not show on the preferences page.