Ah, it seems that Wordpress 2.8.3 has a nasty password reset issue, so I’ve upgraded to the new and shiny and password-reset-vulnerability-lacking 2.8.4. Wordpress makes it fairly easy to upgrade, so why not?