Password Reset

[Naviary2]

There is no automated way yet to reset a user's password when they forget it. Currently they have to email me, and I have to manually delete their account json data, ask them to recreate their account, then after I reinstate their account details.

Proposal

When you enter your password incorrectly, add a "Forgot password?" button that when pressed will ask for your username or email associated with your account, then send a password reset email to that user if they exist.

The link in that email leads you to a one-time use page to change your password.

Expire the link after 5m?

Validate their identity with their browser-id cookie.