This test requires a user account with an email address which can be checked. It is not possible to use the QA testing site, as no emails are sent from the site.

1. Click the 'Forgotten your username or password?' link and enter the username of the user.
2. Check the email inbox for the password reset email and click the link in it.
3. Enter a new password (twice).
4. Check that you are now logged in, and can logout and log back in with your new password.
5. Logout and repeat steps 1 to 4, but instead enter the email address rather than the username.
6. Logout and repeat step 1 four times.
7. Check that only two password reset emails are received.
8. Click the link in one of the password reset emails and repeat steps 3 and 4.