Add accept application + reset password

These are both for end-users
Moved generate passcode to account for now
Email + logic for application approval