[auth] handle forgotten password in Login

[chloerice]

Passwords can be reset in Edit Profile, but if the user forgets their password and can't login they're screwed right now...