User forgot password API

[earvingemenez]

Add an endpoint that let user reset their password.

Criteria:

• User provide their email address(username) and the system should send a reset password email to the user's email.
• The reset password email should contain another URL (with a hash key to be unique), User will go to these URL so they can input a new password.
• add a confirm new password field
• Hash key for the specific link should expire once it was used to reset the user's password. (prevent re-using the key)
• add test