Allow users to reset passwords via email

Currently, we don't have a mechanism for self-service password resets. If we collect users' email addresses and add a config option for mail relay, we can enable this feature. We can make providing an email optional (whether it's optional or not could be configured by an admin) and any users without an email address would need their password reset by an admin.

Someone requested this in the feature survey.