remove user_show from anon blacklist, may improve fix later
Merge pull request #389 from wardi/master

workaround for password reset failure