Logically using Login with Twitch a user will never do the following
- Login with password
- Create a new Account via your website
- use the forgotten password routine.
Therefore, if you MUST provide a password.
- Block the above three routes
- Fill the password with randomly generated gibberish