Set a temp password on user activation so users who skip setting one can use the password reset function.

and allow disconnecting