LPS-49660 Keep the old behavior - require user to reset the password when there is a problem with the password policy

Hi Sam,

I reviewed the changes made by @bejondshao and @hhuijser. I'd like to ask you to verify my changes.

My idea is that previously we didn't ask password policies to perform any checks:
1, before 9afc673 user had to reset password everytime, also in a case when LDAP maintained the policy (`passwordPolicy==null`) => it should be still mandatory to reset the password when LDAP is employed
2, 9cf1cf7 - this new policy check weakens the security / privacy requirements so with any unknown exception we should keep stronger security here => log exception and require user to reset the password

Thanks!