Add password recovery

[lihebi]

This is the usual "forget password?" link on the login page.

It should send a confirmation email with a recovery link to the user's registered email. The link shall contain a token that expires in 10 minutes.