API: Reset password functionality