- Fixed bug #4416: added status checks to user_pass() to prevent mailing
  new passwords to blocked user accounts.