mod_authentication: make the password reset available when logged on