since we are running our own passwd reset facility, we should allow other plugins to validate the password before resetting it.