[CST-6152] allow password change only if a challenge is resolved.

dspace-api/src/main/java/org/dspace/authenticate/AuthenticationServiceImpl.java

@@ -207,4 +207,14 @@ public class AuthenticationServiceImpl implements AuthenticationService {
 
         return null;
     }
+
+    @Override
+    public boolean canChangePassword(Context context, String challenge) {
+        for (AuthenticationMethod method : getAuthenticationMethodStack()) {
+            if (method.canChangePassword(context, challenge)) {
+                return true;
+            }
+        }
+        return false;
+    }
 }