One thing I stumbled upon that should be fixed.
The password reset emails on the pool never expire.. if you click on a link from days ago that was sent to you it will reset the password again. Also, It should maybe email you the new password rather than displaying it immediately. But if the password reset email link expired say after 10 minutes.. then it's probably not a huge deal to display the password immediately.
just some thoughts..
thanks.