I needed to reset my password because my session became invalid. I noticed that the password was entered as clear text in the reset page. Also, when the reset was done, the new password was displayed on the page. This is ok if I am using my own computer. But there might be cases where I'm using a public computer and someone is standing behind me or overlooking what I'm doing...