password reset hole plugged

Added lostpassword_post action to disallow password reset requests for
Clef users when corresponding option is set in settings.