Password recovery

The complete token-reset flow is built, but delivery is intentionally disabled until a real email provider is connected.

Email reset request
Reset with a recovery code
Back to login