Settings Page: Allow login via both moodle and Quodl site

[stianr]

As student or lecturer, I will be going to or giving a number of different lecture courses that use Quodl. Some of them may have a moodle link, and others may not. I want to be able to login to Quodl either by following a link in moodle, or by entering a password so I can participate in all possible quizzes. I may also want to change my password or nickname over time.

• Create a 'settings' page for students, with a link from the menu bar accessible from all pages when logged in (like the Logout link).
• In the settings page, have two fields - nickname, password. Nickname is editable, populated with current value. If password is set, show number of characters with ●●●●● in its field. Below, have ‘Change Password’ to open dialog. If password is not set – because logged in through moodle – leave blank and have link ‘Click here for email to set a password to access Quodl when you're not on moodle’. On click, pass email address to reset password procedure to generate email to user. 'Save' button at bottom of page to update nickname. (Long-term, we may do what Pokemon Go does and allow only a single change of public username.)
• Change password dialog. Three fields – old password, new password, repeat new password. Client-side check new passwords match. check old password is valid and if so replace with hashed version of new.

[stianr]

Given it's important to get something sorted by the end of this sprint, the more practical way of doing this would just be to prompt for a password when clicking through from moodle - so as well as giving a nickname, users also have to set and repeat a password, as they do with standard signup. We can tell them this is just to let them log in direct if they need to, and they won't need to enter a password if coming through moodle.

[stianr]

I have tested the following:

• Sign up direct on Quodl, then login through moodle - requests password first time to merge accounts. Then can click through from moodle or sign in with password on site
• Sign up through moodle - now have password request, can subsequently click through from moodle or sign in using password on site.

So this looks like it's doing exactly what it should - thanks!