Actually make reset password emails work
Restrict reset tokens on hexidecimal characters
A working reset password page
Introduce the account page
Add a logout page