Omniauth: Fix lost_password deciding whether to allow reset