implemented password reset flow

Signed-off-by: Stephan Richter <s.richter@srsoftware.de>

de.srsoftware.oidc.web/src/main/resources/en/todo.html

@@ -13,14 +13,13 @@
             <h1>to do…</h1>
             <ul>
                 <li><a href="users.html">Users: remove</a></li>
-                <li><a href="users.html">Users: send password reset link</a></li>
-                <li><a href="login.html">Login: send password reset link</a></li>
                 <li><a href="login.html">Login: "remember me" option</a></li>
                 <li>at_hash in ID Token</li>
                 <li>drop outdated sessions</li>
                 <li>invalidate tokens</li>
                 <li>implement token refresh</li>
                 <li>handle https correctly in PathHandler.hostname</li>
+                <li>bessere Implementierung für UserController.stron(pass), anwendung überall da wo passworte geändert werden können</li>
             </ul>
         </div>
     </body>