Reset password

MVP note: without an email service, the token is printed to the server console (where npm run dev is running).