Merge pull request #31 from phlipper/move-sessions-to-cookies

use signed cookies directly vs. accessing session:
add database_cleaner for tests
add password_reset fields to identities
add ability to generate a password reset token
add passwords mailer
add password reset workflow service object
add update identity password service object
add UI for forgot password workflow