$wgAllowSecuritySensitiveOperationIfCannotReauthenticate