Conrad, the current censor should work exactly as you describe in your first point.
For your second point - the password emailed is a temporary password that is stored separately from the normal password. Sending a temporary password won't log a user out or anything.
