Updated README with testsupport extension
Send warning emails when a user's email or password is changed

A basic security measure to ensure a user is aware if his/her account
gets compromised.  The email contains a link to the password reset form
which allows a new password to be set.

Fixes #436
Make password reset pages only available to unauthenticated users