Given the user is either waiting for a confirmation email
or has been given one, how can I ensure they do not use the reset password
process and force them to go through the standard confirmation forms (using the confirmation email).
In my case the user must choose a username after confirmation and password reset annoyingly bypasses this.