JS[password-reset] refactor findUserWithToken, added a template rendered reset form (tho lacks templates)
JS[password-reset] koast client supports set NEW password
koast server sends back result for password reset