- Fixed bug #4416: added status checks to user_pass() to prevent mailing new passwords to blocked user accounts.