- Add an form input field for email when creating users.
- Add form input fields for requesting password reset that can take either username or email.
- Monitor for the presence of password reset token in the request for the form that resets password.
- Add an input field to accept only new password.
- Provide customise feedback message.