Password change procedure

Something to add to the list of possible improvements to the new reflector: the password change procedure.

In the profile tab, there is no “change password” option. You only get “Send Password Reset Email”. Not what you would expect initially.

When clicking on that link, you get an email with a new link that points to a page where you can enter a new password ONCE, without confirmation. Better not make a typo…

And, talking about passwords, a secure connection would be a good thing (SSL/TLS - https://)