log password changes

[martin.rueegg]

In the user profile, there is a profile history of changes for the profile values.

It would be very helpful to extend that log to include changes to the password and PIN as well, including the following values:

• - timestamp
  - user taking the action
  - type of action, one of
  • - password change (values not saved, or only the old one, but not the new one)
    - password reset and sent (including temp password)
    - password reset link sent (including token sent)
  - source of action, one of
  • - profile
    - reset link from e-mail
  - IP address of client