[CST-6152] allow password change only if a challenge is resolved.

dspace-api/src/main/java/org/dspace/authenticate/IPAuthentication.java

@@ -278,4 +278,9 @@ public class IPAuthentication implements AuthenticationMethod {
     public boolean isUsed(final Context context, final HttpServletRequest request) {
         return false;
     }
+
+    @Override
+    public boolean canChangePassword(Context context, String challenge) {
+        return false;
+    }
 }