Darrel asked me to modify the reset-password email template as well as update global variable name SYSTEM_NOTIFICATION_SENDER and SYSTEM_NOTIFICATION_RECIPIENT
fixed invalid-password-message bug that dan had found and added test coverage for it -- bug was message disappearing when invalid password entered multiple times on login page