Client portal modifications

Our client has added a client portal to his site [login to view URL], a github php do it yourself package. It uses a subdomain ([login to view URL]). His clients can login and they will be presented with an overview of invoices they received from him and an overview of hours he worked but not yet charged. Invoices and timesheet get the data from Harvest (link) by means of their API. ****Please place your bid starting with the word \"PORTAL\" so that we know you have thoroughly gone through the project. He likes how the portal works, but not how it looks. Also he does not like the security (passwords are not hashed). The passwords (including the password to my account at Harvest) are now included in plain text in the php file settings, which is included in the \'portal\\inc\" folder on the server. He would like to have the possibility for clients to change their password and have a mechanism whereby they can recover a lost password without his active involvement (sending a recovery link to their registered mail address). Requirements: 1. help with the looks (make it look like a part of my main website); and 2. arrange for secure storage of passwords (hashing, php 5.5 password_hash() link) I guess this involves a database? In current system user password is stored in plain text format. Requirement is to have it inscription. 3. Password reset functionality need to be introduce in existing system.