Control redirect after login by onetime password
Implement reset password page and handler