finally make the DAL a singleton
small bug in assetpreload due to DAL work
fully implement password reset and recovery