Now users can recover their passwords and change them while logged in.
admin users must have role admin (which must currently be set manually via database)