Allow users to request a password reset via email. Generate a secure token for resetting the password.