- Removed the ability to send unlimited emails requesting a password
reset. Now you need to wait 5 minutes before sending another request.
- Alterpassword is now only accessible if you're logged in.
- Alterpassword will now let you change ONLY your own user's password
(you used to be able to change any users password by just changing the
id in the url).
- Generating a new key every time the password is changed, rendering the
links useless and fixing the security hole.
Redirect added in case of a non-existing user id in the edit page.