Do not allow deactivated users to reset their passwords.
Different mail for password set and reset.