Account recovery

Recover access without administrator intervention.

Reset links are single-use and invalidate active sessions when the password changes.