id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
21291	PasswordResetForm allows password reset for inactive users	kz26	Claude Paroz	"Confirmed in master and Django 1.6b4.

The following resolves this issue:
self.users_cache = UserModel._default_manager.filter(email__iexact=email, is_active=True) 

Introduced in commit https://github.com/django/django/commit/2f4a4703e1931fadf5ed81387b26cf84caf5bef9

"	Bug	closed	contrib.auth	dev	Release blocker	fixed			Accepted	1	0	0	1	1	0