When we add users through login-server (ldap,saml,keystone) we will create users in the DB with blank password (zer length)
Hard code users added by the login-server to have a zero length password.
This temporarily allows us to deny authentication for users created by the login server through the UAA authentication mechanism.
https://www.pivotaltracker.com/story/show/71283242