Only return password for account session flow if the caller is signed with system key and have get_password permission. am: 9342e137c6
am: 57e38003e8

Change-Id: Iaa63cf3bc288803e92a81386f03d1151d78e6b02