Logged in users can now neither access lost_password.php nor reset_password.php. Fixes #88