Password reset

Generate a self-serve reset link.

When outbound mail is configured, reset links are emailed automatically. Otherwise the link is shown here for local/operator handoff.