We need our API to be able to handle a password reset process properly.

User requests a password reset email
User receives the email
User clicks the link in the email
User fills out form
User submits form
Password is reset
Optional: User receives notification email.