need to change small configuration flag to disable password reset