Access recovery

The password reset model is ready. The token request form will be the next step.