Allow password resets to be disabled independently

Fixes #467