Password reentry should be required for actions listed under Account

[nbitzz]

Password reentry should be required for actions listed under the Account section of the account management menu. In addition, the "I forgot my password" should send an email containing a link to reset an account password, instead of just sending a link which logs the user in.