Password reset

For the MVP, reset links are logged on the server. This keeps local and home-server deployment simple until SMTP is added.