Receive a one-hour password reset link.
For privacy, the response is the same whether or not an account exists.