There are cases where it might be necessary to reset a password (for example, because a user forgot it). Right now, an admin (so, nikki) can check that the mail requesting it matches the verified mail in the account... but can't actually change passwords. Could we change that?

Of course, something like "reset this password" that produced a random pass and mailed the user would also work - but since this is rare enough, I don't think there's a good reason to do the extra work.