Ability to unlock and reset a user's password

Currently, a user is blocked for hours if she/he enters a wrong password 3 consecutive times. We need a way to reset a user password from the API. Currently, I have to stop the server, generate a new password and update the hash in the user file then restart the server. This is not exactly convenient ;-)

TODO:

• Add a route + command to unlock a locked account.
• Furthermore, add a route + command to reset a user's password.