Logged in users can now neither access lost_password.php nor reset_passw...

...ord.php. Closes #88