Missing /forgotpassword

[phosphore]

There are any number of situations where a user may need to reset their password. Typically, people either forget their password or experience some kind of security breach that may have disclosed their password. For most situations, they will be able to reset their own password using this feature.

We'll need to add some db columns to the user table (2) for this