Introduce password recovery mechanism

[eduardoboucas]

With ACL being used to handle authentication and authorisation in consumer applications, we need to introduce a way for people to reset their password (secret).