Card #147 password reset functionality (post to user/{userId}/resetPassword)