http://news.poseidon-us.com/THL7rk
One common pattern in password resets is sending a one-time password to the user to enable them to reset their password. The flow usually looks like:
http://news.poseidon-us.com/THL7rk
http://news.poseidon-us.com/THL7rk