// import "github.com/writeas/web-core/passgen"

// TODO: update signature
func adminResetPassword(u *User, w http.ResponseWriter, r *http.Request) error {
    pass := r.FormValue("pass")
    if pass == "" { 
        // Generate new random password since none supplied
        pass = passgen.NewWordish()
    }    
    hashedPass, err := auth.HashPass([]byte(pass))
    if err != nil {
        return impart.HTTPError{http.StatusInternalServerError, fmt.Sprintf("Could not create password hash: %v", err)}
    }    

    userIDVal := r.FormValue("user")
    log.Info("ADMIN: Changing user %s password", userIDVal)
    id, err := strconv.Atoi(userIDVal)
    if err != nil {
        return impart.HTTPError{http.StatusBadRequest, fmt.Sprintf("Invalid user ID: %v", err)}
    }    

    err = app.db.ChangePassphrase(int64(id), true, "", hashedPass)
    if err != nil {
        return impart.HTTPError{http.StatusInternalServerError, fmt.Sprintf("Could not update passphrase: %v", err)}
    }    
    Info.Printf("ADMIN: Successfully changed.")

    // TODO: output the generated password in an HTML page, etc.
}