WIP: If the user has typed in a valid email address, try requesting a password reset without visiting the /reset_password page

This also extracts `ForceAuthView` from `SignInView`

issue #762