As JIMI potentially grows to accommodate a large number of users, it may be worth considering a password reset functionality. This should be fairly straightforward to implement, and could be an optional setting that can be turned off by administrators. We would need to look to have an additional field for users (email), and a little bit of UI work for a forgot password button.

Perhaps not massively high up the list, but it could help reduce the overall administrative overhead of JIMI.