Reset password

If the email belongs to an active account, a reset token is issued. The response is the same either way.