Add support for disabling password reset functionality

In environments where Stash's user directory is backed by a read-only LDAP server, password reset cannot work. Even in environments where it may be able to work, it may be desirable (for security or other reasons) to disable it.