Implement getResetToken and resetPassword of the idp protocol

Thus completing the minimal-security-starting-point API.

r? @dannycoates