Password reset is next.

This route is ready for the forgot-password flow after auth persistence is connected.