Fix a minor bug where we would offer "m.login.password" login if a custom auth provider supported it, even if password login was disabled.