Dealing with a hacked user account should not require the console

[dccmuseum]

I opened this as a bug report/feature request on purpose to possibly make it better later, the concrete task is already been done and the user got his account back.