[#93} User can reset password

[javtran]

93

• User can request password reset

  • New client page, route /password-forgot
  • New API to request password reset /api/v1/users/request-password-reset
    • Sets passwordResetToken and passwordResetExpires in db
    • Sends password reset link to user's email

• User can reset password through password reset link

  • New client page, route /password-reset/:passwordResetToken
  • New API to validate password reset link /api/v1/users/verify-password-reset/:token
  • Checks if token is valid and is not expired
  • New API to complete password reset /api/v1/users/password-reset
  • Updates password and sends confirmation email to user

• Grouped all authentication-related pages under auth folder.

• Grouped reused form CSS classes under /pages/auth/form.classes.module

• Added auth layout AuthLayout for authentication-related pages

[javtran]

@francisli Not sure if we need to consider these cases:

• User uses an old password for password reset (we would have to keep track of a list of old password to prevent them from reusing?)
• How often they can reset their password