disable OTP on user password reset