Password recovery

Password resets are currently performed by an administrator using authctl.py. Email reset is intentionally disabled.