password reset
log password changes
put flash messages in a better place in the layout
formatting