password can now be reset

Obviously, as it stands, any user can reset the password for any other
user as long as the e-mail address is known/provided. I'm going to fix
that later tonight but wanted to commit what I've got so far