minimum password setting, alphanumeric usernames, better password reset form, basic user url cleanup