* Use HTML templates to send fancy reset password mail, with translations * Send the new password by mail instead of diplaying it n the web page * Remove the need to configure : the value is now set with help of {DOCUMENT_ROOT}
* A token is sent when user ask for password reset * The token is linked to an apache session * The password is reset if the token is valid