Fix OTP PAM rules

Summary:
Disable regular password PAM module, so only OTP are allowed.

This is a follow-up for 02646f8b.

Test Plan: no op, as this version matches the server state.

Reviewers: dereckson

Reviewed By: dereckson

Differential Revision: https://devcentral.nasqueron.org/D1344