Add an option allowing users to use their password to reauthenticate even though password authentication is disabled. (#12883)