Password reset

1) add PasswordResetController
2) add views for PasswordResetController
3) add specs for PasswordResetController
4) add code for PasswordResetController
5) add validation on password length

Please approve.
I don't know. I personally use `where` most of the time. Maybe Matthew knows of a benefit, since he brought it up.