Add some optional policies around password resets, such as password reuse, forced password resets, allowed frequency of password resets
address PR feedback
remove code that was moved to a different file
simplify logic a bit
fix broken tests
pep8/pylint fixes