mod_http_oauth2: Add TODO about disabling password grant Per recommendation in draft-ietf-oauth-security-topics-23 it should at the very least be disabled by default. However since this is used by the Snikket web portal some care needs to be taken not to break this, unless it's already broken by other changes to this module.

Hola:

Si has recibido este email es porque has solicitado el reseteo de la
clave  de tu cuenta Jabber/XMPP {jid}

Para proceder con el cambio de clave, haz click en el siguiente enlace:

{url}

Si no has solicitado resetear tu clave, ignora este mensaje.

Atentamente, el equipo de mijabber.es