Provide setting to disallow users from changing passwords

Migrated from: https://tracker.clearos.com/view.php?id=1931

Reported by: Ben Chambers

Some environments may not want users to have control over changing their own passwords in Webconfig.

Provide method / setting to disallow.

Comment1 from Marc Laporte:
Or can't change their password unless they use multi-factor authentication.