My site is 'turned off', however I still want users to be able to get a password reset.

If your site is closed to members, there is nothing they can do or access. This is a diliberate security feature, so that malicious users can't spoof URLs to call illeagal actions when the site is closed.

This Q&A was found on XOOPS Web Application System : https://xoops.org/modules/smartfaq/faq.php?faqid=577