Made sure the path was from root for changePassword operation.   Removed editUser to post 3.0 backlog.
Fixed NullPointer when resetting password and an invalid user login name is entered.
Separated resetPassword and sendResetPassword request mappings.
Fixed message formatting on changePassword, login, forgotPassword, forgotUsername, and resetPassword html files.