Fix Password::Reset callback

That should fix #289
* search User in DB after `email`
* hash the new Password

Tried local, logon is working and pass is hashed in DB.