[#93} User can reset password

[javtran]

#93

• User can request password reset

  • New client page, route /password-forgot
  • New API to request password reset /api/v1/users/request-password-reset
    • Sets passwordResetToken and passwordResetExpires in db
    • Sends password reset link to user's email

• User can reset password through password reset link

  • New client page, route /password-reset/:passwordResetToken
  • New API to validate password reset link /api/v1/users/verify-password-reset/:token
    • Checks if token is valid and is not expired
  • New API to complete password reset /api/v1/users/password-reset
    • Updates password and sends confirmation email to user

• Grouped all authentication-related pages under auth folder.

• Grouped reused form CSS classes under /pages/auth/form.classes.module

• Added auth layout AuthLayout for authentication-related pages

[javtran]

@francisli
Not sure if we need to consider these cases:

• User uses an old password for password reset (we would have to keep track of a list of old password to prevent them from reusing?)
• How often they can reset their password

[francisli]

Great work! I tweaked some of the route paths a bit so they're less verbose and grouped... on the server side I moved them from users (which is getting a bit busy) into auth...