aalbino/ZRECore — Issue #2: Create the "Reset Password" routine
Author: aalbino
Created: 2011-12-28 12:16:03+00:00
State: open

The admin module's SignController must contain a "Reset Password" page that is linked to via the /admin/sign/in/ view.

The user's e-mail address, and a CAPTCHA must be validated. Then, and only then, can a "reset your password" link be sent to the registered e-mail with a perishable key in the link.

The user must then be able to click the link provided in the e-mail where they will be presented with a form located in the SignController that allows the user to provide a new password (not temporary).

The user must receive confirmation of their success or failure after submitting the form.

Upon success, the perishable link must expire and no longer be usable.