I see a fully working email password reset flow using this approach...