Password reset

1) add PasswordResetController
2) add views for PasswordResetController
3) add specs for PasswordResetController
4) add code for PasswordResetController
5) add validation on password length

Please approve.
Yea I like this idea! You do not give malicious users room for speculations :) But what if real user does typo ? Message could be like "If you do not receive password reset email within 10 minutes latest repeat the action?