Change-pw view tests for old or bad reset links, gives error messages.

I think this finishes the reset-password feature.