More background on this issue. We use s2member for user management. When we use s2member and go into a user’s data entry to reset a single user’s password, the password is set to a new auto-generated password, nullifying the old one. This is important. Then the user receives an email with a link that they can use to set a new password of their choosing. Your plugin sends the link. But it does not nullify the old password. So a user can simply ignore the mail and continue to use their old password. Not good! This should be fixed.