fix password reset and change to our own method instead of devise

+ fix the related test that didn't catch the earlier bug here.
Merge pull request #175 from sharetribe/password-recovery

fix password reset and change to our own method instead of devise