`mailerEnabled` must be set to `true` in order to require password reset (password reset currently only works via email)