login, forgot password

changed forgot password algorithm to create temp password, and store it
in plain text into token field and send email to user.
user can now login with is email as username and the temp password.