Embrace sideloading, abandon embedment
Add reset password page
Handle 409 properly when user signs up with an email address associated to an account