Password reset

1) add PasswordResetController
2) add views for PasswordResetController
3) add specs for PasswordResetController
4) add code for PasswordResetController
5) add validation on password length

Please approve.
It can, but I am using 2 before_actions connected with edit and I left it there on purpose. In reality there are 2 rows of code which are in those before_actions. Even after that, do you still think I should remove it as best-practice?