Fix error in password reset due to recent security fix.

The e.message call resulted in a "*** Unauthorized: Using import with a level specification isn't supported by AccessControl: _warnings" error, uncaught by the try/except.
Correct spelling.
Add changelog entry.
Merge pull request #49 from esteele/4.2.x

Unauthorized error during password reset