#135329 follow up: rolling back some of the user password request form changes, so user names in email address format (eg. site_network module) will still work

- Patch #204900 by webernet: code style fixes.  Likely my last patch of the year.  Fiew.  Thanks all, and see you on the other side.  :)

#201725 by bdragon: access control was renamed to permissions but this was not reflected in two remaining permission checks

#152497 by JohnAlbin, bdragon, moshe weitzman, chx and myself: several user login tasks, such as session id regeneration were not performed in all cases, so centralize this