Password reset works

Assuming you do everything exactly right.
Still needs handling for things like invalid password attempts.
It's also confusing for a user if they forgot there account name, I
don't currently tell the user what there username was if they forgot
that too.