Account management

[mdrum]

Accounts are currently manually created by the superadmin (via direct API calls), but then have static passwords. In the long term, we will need the ability to manage these in the UI, and also allow individual admin accounts to reset their password. This would also necessitate accounts becoming associated with email addresses.