AUTH_DISABLE_EMAIL_PASSWORD=1 can disable email password in BetterAuth, but there's still a potential security issue #12018