doing password resets wrong

from here

to a certain extent, it doesn't even matter if you have the option (or are even forced) to change it afterwards - sending passwords like that simply sets a bad precedent. there are better ways to handle the password reset problem.