Password reset by permission

First of all, thank your for the module; it works great. However, I added a functionality for providing your password reset feature for certain roles only by creating a permission. If the user's role does not have said permission, the user will not see the secret question/answer field on the user edit page and would use the default e-mail password reset functionality after entering the username on user/password page.

The user would also be using the default e-mail password reset if no secret question/answer was set (such as when a user have switched roles).

I've also reduced the number of queries during the password reset process, i.e. I only do a single 'user_load' and store it using 'form_set_value', where as 'password_reset_uid_get' was being called at least 3 times (more if secret answer was incorrect) and then doing a 'user_load' on step 3.

Are you interested in this? If you are, I'll gladly upload the patch.