Password Reset

[syxolk]

• Add new password recovery page (insert email address)
• Send email to user's email address with reset link
• Show password reset page where user can insert new password
• Insert new password and confirm

[syxolk]

Security considerations:

• Don't allow password recovery for users who didn't confirm their email address.
• Don't allow password recovery if there's is an unused password recovery token that was created less than 1 hour ago (to prevent spamming)
• Don't allow password reset if token is older than 1 day