ParseRewrite no longer overwrites explicitly set _GET and _REQUEST values
lock down edit access to reset password fields