Add "Forgot My Password" link to client login page
Enforce LOCKED and !CONFIRMED flags on clients