forgot password handles non active users now.