A ruby/sinatra based self-serve ldap password reset webapp using self-destruct messages with onetimesecret