I found one bug though, if you enter a wrong password against someone's username a few times and then click the "Forgot password" link, the user's current passw

I found one bug though, if you enter a wrong password against someone's username a few times and then click the "Forgot password" link, the user's current password gets invalidated. And it usually takes more than 5 min for the new password email to appear, sometimes even more.