Neither website nor bio should be mandatory to submit the form.

"Forgot your password" link currently gets disabled when registration is disabled, but that's wrong. That link should be there!

The functionality works, we should just enable the link from the login page.

This is a suuuuuper simple task!

A user needs to be able to reset and recover his/her password.

When doing so, my initial plan is to

• Generate a new password * Generate a password hash for the newly generated password * Overwrite the old hash with the new hash * Set some kind of "user_has_forgotten_password" or "requested_to_change_password" value so that the user is pushed towards changing his/her password, thus avoiding any security issues related to the transfer of the password in plain text to the user.
• Email the password to the user * Ask the user to change his/her password * Reset the "requested_to_change_password" flag * Update the generated password with the new password