Change Password

[POST]  /user/password
          user_id [INT ]
          p [STR] -- old password
          p1 [STR]
          p2 [STR]

RESET PASSWORD REQUEST

The reset password feature is simple, if a user want to reset password, we ask him for his email and new password..

[POST]  /password/reset/request
          email [STR] -- registered email
          p1 [STR]
          p2 [STR]

p1,p2? we ask the user to choose password, after that we send him a link, if he clicks the link the new password is activated.  if the user forgot his email too, he should go and sleep

PASSWORD RESET ACTIVATION (to whom it concern)

the reset link will come in this format..

password_reset_url?password_reset=set&ek=user_id&token=new_password_code&service=email

from the link, you see ek and token, collect them and post thus

[POST]  /password/activate/new
          user_id = ek (param ek from url)
          token (param token from url)
          email (optional, service from url)