[Midas] Problem with password reset

[a.parodi at dicomfly.com]

Hi, we are trying to install Midas on our server, in order to deploy a
DICOM images repository.

We got some problem with the password reset feature. The system
ask for an email address in order to reset the password.
We expected that the new password would be sent to the address
specified, but it is also showed in the browser!

In this way, anyone who knows the mail address of a user could reset
it's password and take control of the user account.

We think that visualization of the password in the browser can be disabled
with some parameters, but we can't find which.

Could you provide some help.

thanks in advance

Andrea Parodi