Password reset is now configurable

Along with the option to enable or disable user self registration,
access to the password reset logic is now configurable.