UX review for password resets

[mpeck]

The password reset flow is workable right now, but it could use some love. Generally there are some rough edges around error cases, ie if it isn't configured you just get a 500. There could probably also be some text changes made to the text in the email to clear things up a bit.

For reference this issue was spurred by this duscussion: #910