Password recovery via email links

Closes #1; Allows users to request password recovery links (when they've forgotten their passwords). Upon clicking link: users will be able to change their password. Links expire in `NDB_USERS_RECOVERY_DAYS` days.