Lost password procedure

It would be better to route these to /settings/account/lost/password or /settings/lost/password
Same thing for /reset.
So we stay aligned with other settings related requests.
/register route have to be used for registration only.