Reset password form, writing hash and dateto DB, checking GET[hash] for correct value and correct date.