Reset access

Password recovery is not connected yet, but the route is in place so the login flow no longer dead-ends.