Password Recovery

Password recovery should now be fully functional.

Edit: There's a quirk in dev mode: when being redirected by the emailed link, you must change HTTPS to HTTP for your local dev machine.