pwproj.cgi: instead of resetting the password send an auth code