user password change and forgotten/reset

Fixes #1