Wipe all capabilities and disable password reset for the user

Even if something application password (#7) available on the site with an extra plugin, if capabilities are removed for a user, then it will safeguard what access the user can have.


Similarly, password reset can be disabled for the user