While a user can create an account, they are unable to modify their password if they don't like it or if they forget their password.
In the case of a forgotten password, a verification email should be sent to their the email. It will change their password to a new temporary random character password, which they can use to log back in. Then they can modify their password in any way they feel.
While a user can create an account, they are unable to modify their password if they don't like it or if they forget their password. In the case of a forgotten password, a verification email should be sent to their the email. It will change their password to a new temporary random character password, which they can use to log back in. Then they can modify their password in any way they feel.