Forgotten password in self-registration system broken due to
arguments to PasswordEncoder matches function being wrong way round