Forgot password

Private deploy: tokens are not emailed unless SMTP is configured. Local dev can set REVEAL_RESET_TOKEN=true.

Set new password