Email Password Reset

- [ ] user associates an email with their account on signup
- [ ] user can reset their password
  - [ ] user initiates the reset process through the extension or website
  - [ ] a reset token is generated and stored
  - [ ] user confirms the password reset by clicking on a link with an unexpired token
  - [ ] user selects a new password
- [ ] user can change email on preferences screen