User pages

Adds the forgot password reset code and the change password and user info profile pages.
Should these methods get the ```@authenticated``` decorators?