don't be clever: let the hash go clear on the net, the user should use https, sorry...

don't be clever: let the hash go clear on the net, the user should use https, sorry for him.

but requesting the old password is:

(1) quite not very good as the user already typed it to change its password,
    so it looks like not very good design
(2) more than completely broken for people THAT LOST IT AND TRY TO GET IT BACK !?

git-svn-id: svn+ssh://murphy/home/svn/platal/branches/platal-0.9.10@354 839d8a87-29fc-0310-9880-83ba4fa771e5