The password policy is not taken into account here, so
rather create very long passwords to encourage people
to reset them (which would then apply the password policy).

Users can reset their login password. The password is sent by email to the email address listed in the client account settings.

- Changed shell of website linux user to /bin/false

* introduciton ISPC_WEB_PATH and ISPC_THEMES_PATH