Use tokenless call for password reset