Persist tmp pw until user changes to a new password
Allow file uploads associated with users. Need to verify download permission then implement group uploading and document owner introspection.