- Respect CAN_REMOVE provider setting
- Verbal differences in create password form (based on if user requests
  to add local password method or just tries to change the password)