changed requested by @eaquigley #416

- link from login page
- password complexity: 6 characters, one digit
- send email after successful change
- 60 minute expiration for tokens
- various fixes to working