Appearance
Three endpoints: forgot password (send reset email), reset password (with token), and change password (while logged in).