A user that forgets their username or password should be able to reset their password by providing their email address. If an account is associated with that address, an email will be sent containing a link. Upon clicking on that link, the user will be able to set the password to a value of their choosing.