when a new CustomerUser is created, do not automatically send them an email asking them to verify their email address - instead, send them an email asking them to reset their password
added custom templates for the above email (rather than the built-in reset password template used in other situations)
ensured a user cannot be added multiple times to the same customer
when a CustomerUser resets their password, set them to "ACTIVE" and verify their email address (if it hasn't already been verified)