Don't expose whether another user's email is validated
Show reset password validation errors instead of error 500
CSRF protect password reset request form
Fix register with non-ascii character password (fixes #316)
Use SQLAlchemy events instead of deprecated SessionModificationExtension

This shouldn't affect the behavior in any way.

This is done
* because it has to be done at some point anyway
* and in order to track #317 down.
Include date in logs by default
Merge branch 'develop' into geo