move custom_lostpassword_url under ldap settings (since it really only applies to sites that use only ldap logins instead of wordpress logins).