basic mailers for reset and confirm passwords
use cookies instead of session for sign in. Add a 'remember me?' button to sign in