send shortName to password reset endpoint as a POST body parameter rather than URL parameter
User.sendPasswordReset now takes a search `criteria` argument by which it will find users to email - right now it only accepts the `shortName` key
failing tests for search-by-email functionality
Not quite working API for resetting password by email.
finish off the find-password-token-by-email-address stuff
Test incorrect email too.
Merge pull request #517 from scraperwiki/20140203-find-password-by-email

Reset your password by telling us your email address