Password should not be send trough email
When resetting a password, the new password is sent by mail, which is not very secure. It should only be sent by mail if password was generated by the portal.
When resetting a password, the new password is sent by mail, which is not very secure. It should only be sent by mail if password was generated by the portal.