Bug 18653: Possible privacy breach with OPAC password recovery