OxBlue interview question

How would you design a "Forgotten Password" workflow?