Update login.tpl.php

fixes logic so that if "Allow Password Resets" is enabled, that staff login page shows link: "Forgot my password"