added reset password

added reset password, switched to server side sessions using
kvsessions. Look into using redis datastore for sessions.