Password Reminder with user setting the password

[rthrash]

When the password reminder email is sent, it contains a generated password to activate it.

From a UX perspective, the problem is that it doesn't prompt you to change our password after logging in. The way I think it should work would be to autologin the person with the password and take them straight to the change password screen, without the original password being required.

[rthrash]

Note: not a reminder, but a forgot password mail.

[rthrash]

Current Workflow

1. Currently this creates a random password and sends it via email
2. You then have to confirm it by clicking the link, which actually sets it to the random password
3. Login using this arcane password that only a sysadmin could love
4. To get something remotely memorable, you have to remeber to manually go to change password page and do that

Desired Workflow

1. Click forgot password link which emails account owner a reset password message
2. Email contains a link to reset the password.
3. Go to landing page with a new field to reset your password with confirm link
4. When you reset your password, autologin and go

[theboxer]

Added in 9da3ea1