Hook up the reset password link

* Backend is faked for now, needs hooked up to IAC client.
* An error screen is displayed if fake backend request fails.
* setState has been added to fxam_states.js which allows "out of band" state changes. Depends on @OlavHN's work to handle onhashchange.