Sorry about the spam filter. We get a shitton of spam (I think we're the largest Trac instance anywhere) and it makes the spam filter rather paranoid. If you're signed in it shouldn't get triggered.

Password reset is here: https://www.djangoproject.com/accounts/password/reset/