The current version prevents the user resetting their password if they forget it. I changed the code to add password_forgetten.php to the exception list.

More...