User
Set or reset TOTP POST
Providing a sudo token (or an access token if 2FA is disabled), generate a new TOTP secret. This secret is inactive until the TOTP setup is completed
Send a password reset email POST
Send a password reset email to an existing user. Wait at least 60 seconds between successive calls
