Recover client access

Request a reset token, confirm ownership and set a new password securely.