Use of validate_password_reset hook re-done; many other bits re-done for 1.1