auth: Forbid password reset for non-local users

Also allow an administrator to lift the force password change flag without
specifying a new password.