add link in login page
add reset password email and change some flash messages
add password recovery