157 - Add Password Reset

[mbramson]

Users will be able to reset their passwords via an email reset if they have forgotten their passwords.

TODO:

• [x] Add PasswordResetToken model
• [x] Add /forgotten_password route
• [x] Add form for requesting a password reset email
• [x] Implement PasswordResetToken Service
  • [x] Implement generate_token/1 which takes an email and returns {:ok, token} when that email is assocated with a user.
  • [x] Implement verify_token/2 which takes an email and a token string and verifies that a token exists with that email and token.
• [x] Add :create action for controller governing creation of a new password reset token that uses the PasswordResetToken Service.
• [x] Add route for resetting your password to be linked to from the password reset email
• [x] Add actions for resetting password to ForgotPasswordController
  • [x] Add :editaction to ForgotPasswordController for users to enter new passwords
  • [x] Make sure token has not expired
  • [x] Add :update action for users to change their passwords and delete the used PasswordResetToken
  • [x] Make sure token has not expired
  • [x] Upon success, log the user in
• [x] Add Bamboo dependency
  • [x] Configure Bamboo to use Mailgun
  • [x] Make the forgotten password form send an email containing a link with the token when submitted
• [x] Add forgot password link to login.

Cleanup TODO:

• [x] Use Ecto.Multi in PasswordResetController :update action
• [x] Fix credo issues

Closes #157

[mbramson]

@ericworkman I believe that I've addressed your concerns.

[ericworkman]

LGTM. The only request I have is that we get pairmotron.com pointing to the project so that all the email verification address are a-okay.

[ericworkman]

Hold off merging until we get the dns changes in, please 😃