Password assistance

Recover access securely without exposing user accounts.

This starter stores reset tokens safely in the database and is ready for mail integration later.