Password reset

1) add PasswordResetController
2) add views for PasswordResetController
3) add specs for PasswordResetController
4) add code for PasswordResetController
5) add validation on password length

Please approve.
When I got further down I saw your template for `confirm_password_reset_url`. An update to the comment above would be that I recommend sending even failed creations to that page.