fix selfservice password change with ldap encoding, #16810