removed ability to recover password, since
password recovery happens through CAS, and
the rails app identifies users by email address.