Make it easy to restrict the users that can reset their password

Uses SingleObjectMixin, which gives us an overridable get_queryset.
Further reasoning is detailed in #1052.

Fixes #1052.