User can click on email link to enter new password