[LFTILI-58] password reset endpoint with mail and token gen