only show reset password link when auth_internal is enabled (refs #681)