You can now request a password token (which is stored in the database)
with which the password can be (re-)setted within the webinterface. This
is not really LDAP-aware, but seriously more secure than sending out a
new password via mail.

TODO implement actually sending the token URL via mail. Currently it is
     just printed out on the cmd …

+ Fix .gitignore to seriously ignore the sqlite3 database