Reset access securely.

For privacy, SHAPI gives the same response whether or not an email address is registered.