I see the changelog mentions setting unusable password on the user object, but I can't find it in the code. https://github.com/IdentityPython/djangosaml2/blob/169fc486fc387a0ed57ae01ee67140a424a83a46/CHANGES#L386C1-L388C70 Perhaps, this change was lost while deprecating `configure_user` method?