Re-add password reset to the dashboard

I've had a number of password reset requests lately. This change should reduce support calls / emails, and increase usage.  I think people forget their password more than we expect, and they're embarrassed to ask for resets. 
Since this is a done handler and not a generic callback, should we remove the `error` argument? It also looks like we don't use `user`.