temporarily remove user's ability to 'forget password' as the link wouldn't work without setting up some sort of mailer.