Fixes #139
Fixes #139
Enforce password requirements on password reset
Smaller name requirement, to allow for folks like AJ Li, etc.
Deliberately vague message when user account doesn't exist
Fixes #136
Merge remote-tracking branch 'origin/develop'