Forgot password

Password reset email is not wired to SMTP on this build. In production, configure mail and implement token verification in AuthController.