Forgot Password

Users can request a reset token and set a new password safely. Tokens expire after 1 hour and cannot be reused.