Depending on the provisioning stuff you could also do: 
* /user/password/reset
* /user/password/reset/mail

 maybe