do not allow reset password for external users