When resetting password check that requested user is not expired and/or disabled