Allow email confirmation when users are registered, and password reset via email. Both should be configurable via email templates that can be set in Admin view.