new password request

a new password will be generated, stored in the database and send to the
user