hide password fields when external auth-backend is used
now, the admin can en-/disable autocreation of users