PasswordResetsController prototype
bundle
Merge branch 'master' into update_profile
do not check email_local
update sorcery
password reset
check if tokens are generated before sending emails
re-order methods in User
move /api/users/profile => /api/profile
update profile
update password
assert that new password works
disallow blank password when password resetting
return 401 to failed login request
check current password when updating password
use `class_year_id` when signup
Merge pull request #78 from iTakeshi/update_profile

Update profile
Merge pull request #79 from iTakeshi/solves_#43

solves #43
unuse email param
use /api/profile