Add backend methods for 'Forgot Password'

In my opinion the random password should be generated here in PHP and not be sent via HTTP in plaintext!!!