This endpoint allows users to reset their password using a token and email address that were previously sent via the forgot-password-email endpoint. The user must provide their new password and password confirmation in the request body, while the email and reset token are passed as query parameters. If the token is valid and the passwords match, the user's password will be updated.