Reset password

Implemented the password reset functionality. Resolves #22.
What about handing an instance of `PasswordReset` here instead -- you could instantiate `user` inside the class.  You could quickly implement `Password.find(token)`.