make sure reset password notification does not hide automatically; add manual close link to persistent notifications (closes #569)