Password reset form has no flood control

Could we get this guy in a tagged release? :)

Thought I'd mention, with this change: it seems since the core stuff comes back, modules like Simple Recaptcha → inject themselves once again. So on CI/site test runs, people may see failures related to CAPTCHA. In my case, I've opted to disable CAPTCHA on testing environments.

Automatically closed - issue fixed for 2 weeks with no activity.