fix forgot password checks

Ticket

+status

+priority

+tag

+commit

+issues

There are two separate problems:

forgot password does not check whether an account is active before sending out its information
new account requests are being marked "active"

I got both of these working, and I got about 10 or 12 more assertions going on the account controller test (combo of old and new).

+discussed in support tickets