first check password reset for web user accounts and use only those

http://manage.dimagi.com/default.asp?118525
Merge pull request #3758 from dimagi/multi-password-reset

first check password reset for web user accounts and use only those