reset user's password (intermediate)

[444c43]

once issues #8 and #9 are completed, actually reset the user's password and include the new password in the email the user receives.

[paulelliott]

Definitely do not include the new password in any emails.