[Reset Password] Make endpoint available without authentication

[Corepex]

Hi Team,

The currently used endpoint to trigger the reset email is protected.
Please remove the auth check from /pimcore-studio/api/user/reset-password

---

Edit:
After the reset password link has been sent, users should be able to set a new password without needing to enter their old one.
Maybe we can pass the Token?

[lukmzig]

@martineiber - Old password is not mandatory, see schema: