signup: disable forgot password link for username only