Allow password reset when site is private.

Closes #309.