Evan
Login seems done on the front end.  Created simple servlets to test
reseting the password, but did not implement any of the backend so as
not to step on anyone's toes. I also added a security question to the
registration page and am sending it.  The following servlets were
created and will need to be implemented fully:

GetSecurityQuestionServlet - Used to return the security question
associated with an email address. {email: string} is sent and {question:
string} will need to be returned.

CheckSecurityAnswerServlet - Used to check if the given answer to the
question is valid.  Will send {email: string, answer: string} and expect
{status: boolean} where status represents if the provided answer was
valid.

UpdatePasswordServlet - Used to update the password in the database.
Will send {email: string, password: string} and expect {status: boolean}
where status represents whether the password was added.

These three servlets have been added to the web.xml