if not provided, the module will log an error. in testing env, uses a temp etherealmail account & logs message urls.
user pwd change service, and basic checks on pwd reset tokens