Follow-up
a2c6734 (I42be68c6a0): a "is false" was missing.
Change-Id: Ia81fbcded13c2da4354f1dce383bf5b854b99e49
which can be cascading (previously 'sysop' was hard-coded as the only one).
=== Bug fixes in 1.22 ===
-* Disable Special:PasswordReset when $wgEnableEmail. Previously one could still
- navigate to the page by entering the URL directly.
+* Disable Special:PasswordReset when $wgEnableEmail is false. Previously one
+ could still navigate to the page by entering the URL directly.
* (bug 47138) Fixed a fatal error when a blocked user tries to automatically
create an account on login due external authentication in some circumstances.
* (bug 23393) HTML <hN> headings containing line breaks are now handled