auth: only enforce password length for built-in auth

Created by: unknwon

This PR changes the password length check to be only applied for built-in auth users.

Addresses https://github.com/sourcegraph/sourcegraph/pull/8148#discussion_r373596183.