Request to reset password

This is the result of getting a reset-password token and is usually the result of clicking the link from a reset-password email. If SECURITY_REDIRECT_BEHAVIOR == 'spa' then a 302 is always returned.