Password reset

We should allow password resets (also for backends like LDAP)