There's two major commits: requiring users to provide an email on signup (https://github.com/nex3/arc/commit/c984408fec), and the 'forgot password' flow to email a reset-password link (https://github.com/nex3/arc/commit/150f8a26b5)