Forgot password becomes available after 3 incorrect attempts.