hide password fields when external auth-backend is used
now, the admin can en-/disable autocreation of users
Merge branch 'feature/auth-backends' into prod