I have feedback from a customer running the current release candidate of
roundup. The password reset routine doesn't work (how it doesn't work
see below). I've been able to reproduce this with the current
release-candidate "classic" tracker template as follows:

- press the "Lost your login?" Link and fill in the username for which
  you want to reset the password, it will mail (or write to the debug
  file) a password-reset link
- Open this reset link in a new window in the browser, it will display a
  message with green background "Password reset and email sent to ..."
- check email or email-file again, this now contains a mail with a new
  password for the given user

Neither the new nor the old password work now for logging into the tracker.