[jonplackett]

Mental thought process of programmer:

Sooo... what's the one thing we need this token to be. Secret.

OK, let's just return it to the one person in the whole world we don't want to have it.

Mmmm is it lunchtime...?

[yyx]

More like this:

Issue #2141 - implement password reset: After answering secret question user should see password reset link.

Issue #2534 - send email with password reset link.

Issue #2743 - remove password reset link from web page

Issue #3892 - replace secret question with email address input