cally 1.0.0

data/app/controllers/cally/users_controller.rb

@@ -0,0 +1,292 @@
+require_dependency "cally/application_controller"
+
+module Cally
+  class UsersController < ApplicationController
+  
+    require 'omw_random_string'
+    require 'omw_mailgun'
+
+    before_action :set_user, only: [:show, :edit, :update, :destroy, :toggle_admin]
+    before_action :user_params, only: [:create, :edit, :update, :destroy, :ask_security_question, :reset_password]
+    before_action :is_invitation_only?, only: [:new, :create]
+    before_action :same_user?, only: [:show, :edit, :update]
+    before_action :logged_in_as_admin?, only: [:index, :toggle_admin]
+    before_action :admin_or_same_user?, only: [:destroy]
+
+    def index
+      @users = User.paginate(page: params[:page], per_page: 20)
+    end
+
+    # This method shows the signup form if users count is 0.
+    # If this is invitation only then there must be a valid key
+    def new
+      # Checks if it is the first user or valid invitation key is provided
+      # If the website is not invitation only then you can create a new user here
+      if User.count == 0 || @invitation_only != 'true' || (@invitation_only == 'true' && valid_invitation_key?)
+        @user = User.new
+      else
+        flash[:error] = 'This is invitation only, enter your email for asking for invitation.'
+        redirect_to invitation_path
+      end
+    end
+
+    # This method creates a user if the user.count is 0. 
+    # if the user count >= 0 and there's an valid invitation key then you can also create your account
+    # in all other cases this outputs an error saying there's no valid invitation key
+    def create
+      if User.count == 0 || @invitation_only != 'true' || (@invitation_only == 'true' && valid_invitation_key?)
+        @user = User.new(username: user_params[:username], email: user_params[:email], password: user_params[:password], 
+                        security_question: user_params[:security_question], security_answer: user_params[:security_answer])
+        
+        # creates a rondow string of 32 characters which will be the user's key
+        @user.user_key = OmwRandomString.generate(32)
+
+        # If this is the first user created then automatically set him/her as administrator
+        if User.count == 0
+          @user.admin = true
+        end
+
+        if @user.save
+          flash[:success] = "User '#{@user.username}' successfully created."
+          session[:user_id] = @user.id 
+          redirect_to user_path(@user)
+
+          # if this creation is because of an invite then remove the invitation from the database
+          if defined? @invitation_key
+            Invitation.find_by(invitation_key: @invitation_key).destroy
+          end
+        else
+          if defined? @invitation_key
+            render 'new', locals: { invitation_key: @invitation_key }
+          else
+            flash[:error] = 'Error creating account'
+            render 'new'
+          end
+        end
+      else
+        flash[:error] = 'This is invitation only'
+        redirect_to invitation_path
+      end
+    end
+    
+    def login
+      if User.count == 0
+        redirect_to new_user_path
+      end
+    end
+
+    def show
+    end
+
+    def edit
+    end
+
+    def update
+      if @user.update(user_params)
+        flash[:success] = 'Your profile is updated successfully.'
+        redirect_to user_path(@user)
+      else
+        flash[:error] = 'Error updating your profile.'
+        redirect_to edit_user_path(@user)
+      end
+    end
+
+    def destroy
+     if @user == current_user
+       session[:user_id] = nil
+     end
+
+     if @user.destroy
+      flash[:success] = 'User successfully deleted.'
+      redirect_to login_path
+     else
+      flash[:error] = 'Error deleting user.'
+      if logged_in?
+        redirect_to user_path(current_user)
+      else
+        redirect_to login_path
+      end
+     end
+    end
+
+    def toggle_admin
+      # Here you can toggle a user administration rights if it's not the first user.
+      # The first user will always be an administrator.
+      if @user != User.first && @user.update(admin: !@user.admin)
+        flash[:success] = 'Admin status updated successfully.'
+        redirect_to users_path
+      else
+        flash[:error] = 'Error updating admin status.'
+        redirect_to users_path
+      end 
+    end
+
+    def forgot_password
+    end
+
+    def ask_security_question
+      # When a user want to reset his/her password then he/she have to
+      # answer the security question given by him/her on signup
+      # If the user doesn't exists it throws an error.
+      user = User.find_by(email: user_params[:email])
+      if user
+        @user_email = user.email
+        @security_question = user.security_question
+      else
+        flash[:error] = "User with email: '#{user_params[:email]}' not found."
+        redirect_to forgot_password_path
+      end
+    end
+    
+    def reset
+      @reset_key = params[:reset_key]
+      @user_key = params[:user_key]
+    end
+
+    def reset_password
+      user = User.find_by(email: user_params[:email], security_answer: user_params[:security_answer].downcase)
+
+      if user
+        if retrieable?(user)
+          # when the user haven't used up his/her retry attempts set as an environment variable.
+          # This will create a random string and sends this to the user's email
+          # When the user clicks on this url in the received email he/she will be
+          # able to reset his/her password
+          reset_key = OmwRandomString.generate(32)
+          user.reset_key = reset_key
+          added_retry = add_retry(user)
+
+          if user.save && added_retry && send_reset_key(reset_key, user)
+            flash[:success] = "Reset key is sent to '#{user.email}'."
+            redirect_to login_path
+          else
+            if @error_sent_message
+              flash[:error] = "error sending reset key with message: '#{@error_sent_message}'."
+              redirect_to forgot_password_path
+            else
+              flash[:error] = 'Error saving reset_key.'
+              redirect_to forgot_password_path
+            end
+          end
+        else
+          flash[:error] = 'You has reached the limit of allowed password resets.'
+          redirect_to forgot_password_path
+        end
+      else
+        flash[:error] = 'The security answer is incorrect.'
+        redirect_to forgot_password_path
+      end
+    end
+
+    def execute_reset
+      # this is called when resetting the user's password
+      # If successfull it will remove the reset_key in the database
+      # else it will show an error 'No valid reset password key'
+      # which means the reset key is not found in the database
+      @user = User.find_by(user_key: user_params[:user_key], reset_key: user_params[:reset_key])
+      
+      if @user && (@user.reset_key != nil) && @user.update(user_params)
+        @user.reset_key = nil
+
+        if @user.save
+          flash[:success] = 'Password successfully changed'
+          session[:user_id] = @user.id
+          redirect_to user_path(@user)
+        else
+          flash[:error] = 'Error deleting reset_key' 
+          redirect_to login_path
+        end
+      else
+        flash[:error] = 'No valid reset password key' 
+        render 'reset', locals: { user_key: params[:user_key], reset_key: params[:reset_key] }
+        #redirect_to reset_path(user_key: user_params[:user_key], reset_key: user_params[:reset_key])
+      end
+    end
+
+    private
+
+    # get the params for user (create)
+    def user_params
+      if params[:user].present?
+        params.require(:user).permit(:username, :email, :password, :invitation_key, :user_key, :reset_key, :security_question, :security_answer)  
+      end
+    end
+
+    # This checks if the env var is set to true, if not then everyone can signup
+    def is_invitation_only?
+      @invitation_only = ENV['INVITATION_ONLY'] || 'false'
+    end
+
+    def set_user
+      if (!User.exists?(id: params[:id])) 
+        redirect_to login_path
+      else
+        @user = User.find(params[:id])
+      end
+    end
+  
+    def add_retry(user)
+      # when a user hasn't burned all his/her retries for the day
+      # it will add 1 retry to the database
+      if user.retry_date == Date.today && user.retry < ENV['MAILGUN_RETRIES'].to_i 
+        user.update(retry: user.retry+1) 
+        user.update(retry_date: Date.current) 
+        return true     
+      elsif user.retry_date < Date.today 
+        user.update(retry: 0) 
+        user.update(retry_date: Date.current)
+
+        return true
+      else
+        return false
+      end
+    end
+ 
+    def retrieable?(user)
+      # In this bit of code we will check if a user hasn't burned all
+      # his/her retries for resetting the password.
+      # When he/she burned their retries it will be for this day.
+      if user && (user.retry < ENV['MAILGUN_RETRIES'].to_i || user.retry_date < Date.today)
+        return true
+      else
+        return false
+      end
+    end
+    
+    def send_reset_key(reset_key, user)
+      # Here the reset key is send to the user's email address.
+      # When clicking on the url in the received e-mail the user
+      # will be able to reset his/her password
+      if !test_env?
+        set_mailgun_prefix
+        url = "#{request.base_url}/#{@mailgun_prefix}reset/#{user.user_key}/#{reset_key}" 
+        res = Mailgun.post("/#{ENV['MAILGUN_DOMAIN']}/messages", 
+                           body: { from: "#{ENV['MAILGUN_SENDER_NAME']} <#{ENV['MAILGUN_SENDER_EMAIL']}>", 
+                                   to: "#{user.email}", 
+                                   subject: 'Reset your password', 
+                                   text: "the reset url is: #{url}" })
+        if res.code == 200
+          return true
+        else
+          @error_sent_message = res.message
+          return false
+        end
+      elsif test_env?
+        return true
+      else
+        return false
+      end
+    end
+
+    def valid_invitation_key?
+      # This will check if there's a valid invitation key submitted as a parameter..
+      if ((params[:invitation_key] && Invitation.exists?(invitation_key: params[:invitation_key])) || (user_params && user_params[:invitation_key] && Invitation.exists?(invitation_key: user_params[:invitation_key])))
+        @invitation_key = params[:invitation_key] || user_params[:invitation_key]
+        return true
+      else
+        return false
+      end
+    end
+
+  end
+end

data/app/helpers/cally/application_helper.rb

@@ -0,0 +1,30 @@
+module Cally
+  module ApplicationHelper
+    #helper_method :current_user, :logged_in?, :is_admin?, :is_first_user?
+
+    def current_user
+      @current_user ||= User.find(session[:user_id]) if session[:user_id]
+    end
+
+    def logged_in?
+      !!current_user
+    end
+  
+    def is_admin?
+      if logged_in? && current_user.admin
+        return true
+      else
+        return false
+      end
+    end
+
+    def is_first_user?(user)
+      if user == User.first
+        return true
+      else
+        return false
+      end
+    end
+
+  end
+end

data/app/helpers/cally/invitations_helper.rb

@@ -0,0 +1,4 @@
+module Cally
+  module InvitationsHelper
+  end
+end

data/app/helpers/cally/session_helper.rb

@@ -0,0 +1,4 @@
+module Cally
+  module SessionHelper
+  end
+end

data/app/helpers/cally/users_helper.rb

@@ -0,0 +1,4 @@
+module Cally
+  module UsersHelper
+  end
+end

data/app/models/cally/application_record.rb

@@ -0,0 +1,3 @@
+class ApplicationRecord < ActiveRecord::Base
+  self.abstract_class = true
+end

data/app/models/cally/invitation.rb

@@ -0,0 +1,8 @@
+module Cally
+  class Invitation < ActiveRecord::Base
+  
+    before_save { self.email = email.downcase }
+    validates :email, uniqueness: { case_sensitive: false }, format: { with: /\A[\w+\-.]+@[a-z\d\-.]+\.[a-z]+\z/i }
+  
+  end
+end

data/app/models/cally/user.rb

@@ -0,0 +1,13 @@
+module Cally
+  class User < ActiveRecord::Base
+ 
+    has_secure_password
+    before_save { self.email = email.downcase }
+    before_save { self.security_answer = security_answer.downcase }
+    validates :username, presence: true, length: { minimum: 3, maximum: 25 }, uniqueness: { case_sensitive: false }
+    validates :email, presence: true, uniqueness: { case_sensitive: false }, format: { with: /\A[\w+\-.]+@[a-z\d\-.]+\.[a-z]+\z/i }
+    validates :password, length: { minimum: 15 }, allow_nil: true
+    validates :security_question, presence: true
+    validates :security_answer, presence: true, uniqueness: { case_sensitive: false }
+  end
+end

data/app/views/cally/invitations/index.html.erb

@@ -0,0 +1,30 @@
+<%= render 'cally/shared/header' %>
+<%= render 'cally/shared/messages' %>
+
+<div class="row">
+  <div class="col-md-4 col-md-offset-4">
+    <div class="padded-mobile">
+<h1 class="centered">All Invitations</h1>
+
+<% @invitations.each do |invite| %>
+  <div class="row invitation-overview">
+    <div class="col-md-4">
+      <%= sanitize invite.email %>
+    </div>
+    <div class="col-md-4">
+      <%= invite.created_at.to_s(:omw_long) %>
+    </div>
+    <div class="col-md-4">
+      <%= link_to 'Delete', delete_invitation_path(invite.id), method: :delete %> | 
+      <% if invite.sent %>
+        <%= link_to 'resend', send_invitation_path(invite) %>
+      <% else %>
+        <%= link_to 'send', send_invitation_path(invite) %>
+      <% end %>
+    </div>
+  </div>
+<% end %>
+    </div> <!-- end padded-mobile //-->
+  </div> <!-- end col-md-4 outer //-->
+</div> <!-- end row outer //-->
+<div class="centered custom-pagination"><ul><%= will_paginate @invitations, container: false %></ul></div> 

data/app/views/cally/invitations/new.html.erb

@@ -0,0 +1,20 @@
+<%= render 'cally/shared/header' %>
+<%= render 'cally/shared/errors', obj: @invitation %>
+<%= render 'cally/shared/messages' %>
+
+<div class="row">
+  <div class="col-md-4 col-md-offset-4">
+    <div class="padded-mobile">
+      <h1 class="centered">Request an invitation</h1>
+
+      <%= form_for @invitation, html: { class: 'form-horizontal' } do |f| %>
+        <div class="form-group">
+          <div class="col-md-12"><%= f.text_field :email, placeholder: 'Enter your email address', class: 'form-control' %></div>
+        </div>  
+        <div class="form-group">
+          <div class="col-md-12"><%= f.submit 'Request invitation', class: 'btn btn-success btn-block' %></div>
+        </div>
+      <% end %>
+    </div> <!-- end padded-mobile div //-->
+  </div> <!-- end col-md-4 div //-->
+</div> <!-- end row div //-->

data/app/views/cally/shared/_errors.html.erb

@@ -0,0 +1,6 @@
+<% if obj && obj.errors.any? %>
+  <% obj.errors.full_messages.each do |msg| %>
+    <%= msg %>
+  <% end %>
+<% end %>
+

data/app/views/cally/shared/_header.html.erb

@@ -0,0 +1,25 @@
+<nav class="navbar navbar-default" id="menu-bar">
+  <div class="container-fluid">
+    <div class="navbar-header">
+      <button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#menu" aria-expanded="false">
+        <span class="glyphicon glyphicon-menu-hamburger"></span>
+      </button>
+      <span class="navbar-brand">Cally User Engine</span>
+    </div> <!-- end navbar-header //-->
+    <div class="collapse navbar-collapse" id="menu">
+      <ul class="nav navbar-nav navbar-right">
+        <% if logged_in? %>
+          <% if current_user.admin %>
+            <li><%= link_to 'Invitations', all_invitations_path, class: "#{'active' if current_page? all_invitations_path}" %></li> 
+            <li><%= link_to 'All Users', users_path, class: "#{'active' if current_page? users_path}" %></li>
+          <% end %>
+          <li><%= link_to 'Profile', user_path(current_user), class: "#{'active' if current_page? user_path(current_user)}" %></li> 
+          <li><%= link_to 'Edit', edit_user_path(current_user), class: "#{'active' if current_page? edit_user_path(current_user)}" %></li>
+          <li><%= link_to 'Logout', logout_path, method: :delete %></li>
+        <% else %>
+          <li><%= link_to 'Login', login_path, class: "#{'active' if current_page? login_path}" %></li>
+        <% end %>
+      </ul> <!-- end menu-items //-->
+    </div> <!-- end navbar-collapse //-->
+  </div> <!-- end container-fluid //-->
+</nav> <!-- end navbar //-->

data/app/views/cally/shared/_messages.html.erb

@@ -0,0 +1,7 @@
+<% flash.each do |name,msg| %>
+  <div class="alert alert-dismissable alert-<%= name %> centered">
+    <button type="button" class="close" data-dismiss="alert">x</button>
+    <%= sanitize msg %>
+  </div>
+<% end %>
+

data/app/views/cally/users/ask_security_question.html.erb

@@ -0,0 +1,19 @@
+<%= render 'cally/shared/header' %>
+<%= render 'cally/shared/messages' %>
+
+<div class="row">
+  <div class="col-md-4 col-md-offset-4">
+    <div class="padded-mobile">
+      <h1 class="centered">Answer your security question</h1>
+ 
+      <%= form_for :user, method: :put, html: { class: 'form-horizontal'} do |f| %>
+        <%= f.hidden_field :email, value: @user_email %>
+        <div class="centered security-question">security question: </div>
+        <div class="centered"><%= sanitize @security_question %></div>
+        <div class="form-group"><%= f.text_field :security_answer, placeholder: 'Enter your answer to the security question', class: 'form-control' %></div>
+        <div class="form-group"><%= f.submit 'Reset password', class: 'btn btn-warning btn-block' %></div>
+      <% end %>
+    </div> <!-- end padded-mobile div //-->
+  </div> <!-- end col-md-4 div //-->
+</div> <!-- end row div //-->
+

data/app/views/cally/users/edit.html.erb

@@ -0,0 +1,45 @@
+<%= render 'cally/shared/header' %>
+<%= render 'cally/shared/messages' %>
+<%= render 'cally/shared/errors', obj: @user %>
+
+<!-- the next div is to add an id saying this is the edit page (used by javascript password check) //-->
+<div id="edit_page" class="edit_page"></div>
+<!-- end special div //-->
+<div class="row">
+  <div class="col-md-4 col-md-offset-4">
+    <div class="padded-mobile">
+      <h1 class="centered">Update your profile</h1>
+      <%= form_for @user, html: { class: 'form-horizontal'} do |f| %>
+        <div class="form-group">
+          <label for="user_username" class="control-label col-md-2">Username</label>
+          <div class="col-md-10"><%= f.text_field :username, class: 'form-control' %></div>  
+        </div>
+        <div class="form-group">
+          <label for="user_email" class="control-label col-md-2">E-mail</label>
+          <div class="col-md-10"><%= f.text_field :email, class: 'form-control' %></div>
+        </div>
+        <div class="form-group">
+          <label for="user_password" class="control-label col-md-2">Password</label>
+          <div class="col-md-10"><%= f.password_field :password, class: 'form-control password' %></div>
+        </div>
+        <div class="form-group">
+          <label for="user_password_check" class="control-label col-md-2">Re-enter password</label>
+          <div class="col-md-10"><%= f.password_field :password_check, placeholder: 'Re-enter your password', class: 'form-control password-check' %></div>
+        </div>
+        <div class="form-group">
+          <label for="user_security_question" class="control-label col-md-2">Security Question</label>
+          <div class="col-md-10"><%= f.text_field :security_question, class: 'form-control' %></div>
+        </div>
+        <div class="form-group">
+          <label for="user_security_answer" class="control-label col-md-2">Security Answer</label>
+          <div class="col-md-10"><%= f.text_field :security_answer, class: 'form-control' %></div>
+        </div>
+        <div class="form-group">
+          <div class="col-md-10 col-md-offset-2">
+            <%= f.submit 'Update Profile', class: 'btn btn-primary btn-block submit-btn', disabled: 'disabled' %>
+          </div>  
+        </div>
+      <% end %>
+    </div> <!-- end padded-mobile div //-->
+  </div> <!-- end col-md-4 div //-->
+</div> <!-- end row div //-->

data/app/views/cally/users/forgot_password.html.erb

@@ -0,0 +1,15 @@
+<%= render 'cally/shared/header' %>
+<%= render 'cally/shared/messages' %>
+
+
+<div class="row">
+  <div class="col-md-4 col-md-offset-4">
+    <div class="padded-mobile">
+      <h1 class="centered">Reset your password</h1>
+      <%= form_for :user, html: { class: 'form-horizontal'} do |f| %>
+        <div class="form-group"><%= f.text_field :email, placeholder: 'Enter your email address', class: 'form-control' %></div>
+        <div class="form-group"><%= f.submit 'Show security question', class: 'btn btn-primary btn-block' %></div>
+      <% end %>
+    </div> <!-- end padded-mobile div //-->
+  </div> <!-- end col-md-4 div //-->
+</div> <!-- end row div //-->

data/app/views/cally/users/index.html.erb

@@ -0,0 +1,32 @@
+<%= render 'cally/shared/header' %>
+<%= render 'cally/shared/messages' %>
+
+<div class="row">
+  <div class="col-md-4 col-md-offset-4">
+    <div class="padded-mobile">
+      <h1 class="centered">Users</h1>
+
+      <% @users.each do |user| %>
+        <div class="row  user-overview <%= 'admin' if user.admin %>">
+          <div class="col-md-4">
+            <div><%= sanitize user.username %></div>
+          </div> <!-- end username and admin //-->
+          <div class="col-md-4">
+            Last Logged in: <%= user.last_logged_in_time.to_s(:omw_long) %>
+          </div> <!-- end last logged in time user //-->
+          <div class="col-md-4">
+              <% if !is_first_user?(user) && is_admin? && !user.admin %>
+                <%= link_to 'admin', toggle_admin_path(user), method: :post %> | 
+              <% elsif !is_first_user?(user) && is_admin? && user.admin %>
+                <%= link_to 'revoke admin', toggle_admin_path(user), method: :post %> | 
+              <% end %> 
+              <% if !is_first_user?(user) && is_admin? %>
+                <%= link_to 'Delete', user_path(user), method: :delete %>
+              <% end %>
+          </div> <!-- end user actions //-->
+        </div> <!-- end row user //--> 
+      <% end %>
+    </div> <!-- end padded-mobile //-->
+  </div> <!-- end col-md-4 outer //-->
+</div> <!-- end row outer //-->
+<div class="centered custom-pagination"><ul><%= will_paginate @users, container: false %></ul></div> 

data/app/views/cally/users/login.html.erb

@@ -0,0 +1,22 @@
+<%= render 'cally/shared/header' %>
+<%= render 'cally/shared/messages' %>
+<% session[:return_to] = request.referer %>
+
+<% if defined? @user %>
+  <%= render 'cally/shared/errors', obj: @user %>
+<% end %>
+
+<div class="row">
+  <div class="col-md-4 col-md-offset-4">
+    <div class="padded-mobile">
+      <h1 class="centered">Login</h1>
+
+      <%= form_for :session, html: { class: 'form-horizontal'} do |f| %>
+        <div class="form-group"><%= f.text_field :email, placeholder: 'Enter your email address', class: 'form-control' %></div>
+        <div class="form-group"><%= f.password_field :password, placeholder: 'Enter your password', class: 'form-control' %></div>
+        <div class="form-group"><%= f.submit 'login', class: 'btn btn-block btn-primary' %></div>
+      <% end %>
+      <div class="centered"><%= link_to 'Forgot password', forgot_password_path %></div>
+    </div> <!-- end padded-mobile div //-->
+  </div> <!-- end col-md-4 div //-->
+</div> <!-- end row div //-->

data/app/views/cally/users/new.html.erb

@@ -0,0 +1,40 @@
+<%= render 'cally/shared/header' %>
+<%= render 'cally/shared/errors', obj: @user %>
+<%= render 'cally/shared/messages' %>
+
+<div class="row">
+  <div class="col-md-4 col-md-offset-4">
+    <div class="padded-mobile">
+      <h1 class="centered">Create your account</h1>
+
+      <%= form_for @user, html: { class: 'form-horizontal'} do |f| %>
+        <div class="form-group">
+          <%= f.text_field :username, placeholder: 'enter your username', class: 'form-control' %>
+        </div>
+        <div class="form-group">
+          <%= f.text_field :email, placeholder: 'enter your e-mail address', class: 'form-control' %>
+        </div>
+        <div class="form-group">
+          <%= f.password_field :password, placeholder: 'enter your password (minimum 15 characters)', class: 'form-control password' %>
+        </div>
+        <div class="form-group">
+          <%= f.password_field :password_check, placeholder: 'Re-enter your password', class: 'form-control password-check' %>
+        </div>
+        <div class="form-group">
+          <%= f.text_field :security_question, placeholder: 'Enter your security question', class: 'form-control' %>
+        </div>
+        <div class="form-group">
+          <%= f.text_field :security_answer, placeholder: 'Enter your security answer', class: 'form-control' %>
+        </div>
+
+        <% if defined? @invitation_key %>
+          <%= f.hidden_field :invitation_key, value: @invitation_key %>
+        <% end %>
+
+        <div class="form-group">
+          <%= f.submit 'Create account', class: 'btn btn-success btn-block submit-btn', disabled: 'disabled' %>
+        </div>
+      <% end %>
+    </div> <!-- end padded-mobile div //-->
+  </div> <!-- end col-md-4 div //-->
+</div> <!-- end row div //-->

data/app/views/cally/users/old_reset_password.html.erb

@@ -0,0 +1,3 @@
+<%= render 'cally/shared/header' %>
+<%= render 'cally/shared/messages' %>
+<h1>Reset your password</h1>