Password reset arrives in Phase 2. For the demo, the reset link is logged via the (mocked) notification service rather than emailed.