coveralls
fail_noexistent_user option to make resetting password more secure