Reauthenticates the possession of an email or phone number for the purpose of password change.

For a password to be changed on a user account, the user's email or phone number needs to be confirmed before they are allowed to set a new password. This requirement is configurable. This API sends a confirmation email or SMS message. A nonce in this message can be provided in PUT /user to change the password on the account.