Fix credentials/challenges types

Associated identities and credentials are now captured by models in
loopback-component-passport. These two properties will be removed in
2.x.