Refactoring.
Use contactdb user to create a new user.
Use contact database at login time.
Support capabilities in the shared contact database.
Use caller_landmark to simplify life
Don't store passwordHmacKeys in the database.

Seems like a bad plan. But grandfather old databases.
Derp & derp
Better error messages
Derp
Improved capability protocol handles both contactdb-users and regular users
Simplify change_password to save the new password.
Better password reset protocol.

Enter it into the password field so user presses enter, which encourages
browser to save password.
Support loginFormHeading setting