Add a test for updating a user in ScimUserEndpointsMockMvcTests
Add the password reset endpoint

users are retrieved by email, and their user id is embedded in the expiring code

In cloud foundry, the user's email matches their username. By using the email field, we avoid the need to validate the username as an email before attempting to send to it.  This also maintains consistency with the forgot password page UI, for other uaa deployments
Add a password_change endpoint

The existing ScimUserEndpoints do not expose password change functionality.  Rather than expand their scope, a specific password_change endpoint has been added, only accessible by the login server
Merge branch 'feature/reset_password_api' into develop
https://www.pivotaltracker.com/n/projects/997278/stories/67714674
Reapplying the DDL to postgres to bring legacy databases up to date requires that we do it without a transaction.