Password reset

1) add PasswordResetController
2) add views for PasswordResetController
3) add specs for PasswordResetController
4) add code for PasswordResetController
5) add validation on password length

Please approve.
Could try:

```ruby
@user = User.find_by_token(params[:token]) if params[:token]
```