Add a reset_token column to user schema
Stub out account controller
Add reset_token to user storage (and its tests)
Use the correct method to get the user.
A working login page
Make the virtual 'loggedin' role exist
Prettify the form a bit
Restrict access base on user role