Account recovery

Reset access. Preserve the identity.

A verified reset replaces the password and closes every previous session.