Use ssl instead of tls in the password reset form. Update lighttpd server configuration. Update submodule tpl/3