Implementation of the new_password endpoint.

Found a way to create the token that does not need to persist it to the database.
This requires proper error messages, written by people who speak menglis good.

app/main/dao/password_reset_token_dao.py

@@ -1,19 +0,0 @@
-from datetime import datetime, timedelta
-from app import db
-from app.models import PasswordResetToken
-
-
-def insert(token, user_id):
-    password_reset_token = PasswordResetToken(token=token,
-                                              user_id=user_id,
-                                              expiry_date=datetime.now() + timedelta(hours=1))
-    insert_token(password_reset_token)
-
-
-def insert_token(password_reset_token):
-    db.session.add(password_reset_token)
-    db.session.commit()
-
-
-def get_token(token):
-    return PasswordResetToken.query.filter_by(token=token).first()

app/main/dao/users_dao.py

@@ -59,12 +59,13 @@ def update_mobile_number(id, mobile_number):
     db.session.commit()
 
 
-def update_password(id, password):
-    user = get_user_by_id(id)
+def update_password(email, password):
+    user = get_user_by_email(email)
     user.password = hashpw(password)
     user.password_changed_at = datetime.now()
     db.session.add(user)
     db.session.commit()
+    return user
 
 
 def find_all_email_address():