implement password reset, redid URL vars

Signed-off-by: William Rockwood <wrockwood@tadl.org>