Handle XHR on reset password #6141

If form is invalid, I would prefer to send back `form.errors`