Doesn't everyone just log in to everything with the forgot password link?