POST /user/passreset completed