inactive users can not reset password