Request a reset link

Reset requests are rate-limited and abuse-protected. In development, delivery is documented in the README.