Add password reset handler.

Closes #229.