Reset Password event should have Email Template option

[michael-e]

Reading about the latest security issues on Sony's Playstation network, I noticed that it would be a very good idea to implement an email template(s) setting for the Reset Password event. Like in Sony's case, sending an email upon successful password reset is an important security "fallback".

Typically the two step process sould be like this:

1. Generate Recovery Code: Email saying "If you did not ask for a password reset, you may disregard this email."
2. Reset Password: Email saying "If you did not do this, your account has been hacked. Please contact support immediately."

[brendo]

Sounds reasonable to me and it's easy enough to implement

[michael-e]

Big Picture updated!