update ResetForm::attributeLabels()
remove $ensureOne option from Userkey::generate() (for extra security)