update for latest version of lapis
add reset password
add csrf protection and private encryption secret
add changes page
add user settings page