Clean up imports
Add password request API
Move post user creation actions to an actor
Update generated code
Assert org form is valid
Route password created, user created messages
Standardize validation of user creation, password
Add tests around user validation - include password validation
Update tests for auto membership after email verification
Update test - passwords need to be at least 5 chars
Tests for password reset controller
Handle errors / typos in call to code generator
Add tests for pwd reset via token. Remove token from password form (it's in the URL)
Move pwd reset token to HTTP POST w/ own controller
Expose forgot password in UI
Complete reset password flow
autocommit: Update configuration to record version 0.7.37
Update types for api.json description
initial full description of api.json
First pass at spec module