...
- lost password page: enter username and/or mail adress, server sends mail to adress with confirmation link.
On the confirmation site, the user can enter a new password (twice) - login site: enter username and password. Checkbox with "remember me".
- logout link on every page.