Password reset will be wired in Phase 1 build-out (email + token). For now, admin can reset passwords in the database.