Send a reset email, validate the token, and return to the console with a hardened session flow that works cleanly on any screen.