Password change can be triggered by anyone

[d262a15b-daf8-4c67-a39d-ec7e03fcc16b]

What is the version of Jorani?

1.0.0

Expected behaviour

If a user forgets their password, a link to a password change dialog can be send to the user.
However, this email can be ignored, if the user did not really forget their password.

Actual behaviour

Anyone who knows a login name can trigger a password change,
which is annoying for the acual user.

Steps to reproduce the behavior

Enter a valid user name (not own user name) of the Jorani instance and click on "Send me my password"