Now returning HTTP 422 for validation errors
Changed "reset-password-request" to "password-reset"
Client resetPasswordUrl is now required. Also fixed DB field length for the URLs and set URL min length to 10.