Password reset foundation

SRMS creates a one-hour reset token for an active account. Delivery can later be connected to email or SMS notifications.