disableCommits and password security configuration cannot be used together
Password security configuration, such as setting a passwordAgeLimit, makes
it impossible to use the disableCommits feature added in v.2.3.
With password security configured, userProfiles must commit during login,
to record login information. If commits are disabled for this used, this
commit fails and so any login attempt fails.
If you require password security configuration, do not disableCommits for
any users. For users that should not be able to commit, after any calls
to login execute System commitsDisabledUntilLogout.