Generate a token that can be used by user to reset their password.
POST
/user/resetpassword
This call generates a 4 digit token and sends it via second channel of communication over to the user (at the moment the only second channel of communication supported is email). The user can then use this token to reset their password.