Add sending email and handling of email address validation
Add forgotten password handling.

Includes:
- Form to request a password reset email with link
- Form to actually (re-)set the password.

This is based on:
- usernames must be known (and are unique)
- email addresses are unique
- email account is in possesion of the user
Add pagination for activities