Fixed #23409 -- Extract PasswordResetForm.get_users method for easier password-reset policy customization.