added backend logic for reseting password #111
usage: POST on url api/user/password username