remove AuthPlugin usage from UserLoginSpecialController

* AuthPlugin::allowPasswordChange() always returned true.