Reset access securely.

A six-digit code is sent to the active registered email. It expires in 10 minutes and can only be used once.