When the user resets his password, a new temporary password is generated and sent to the user e-mail. Using this temporary password the user can activate his account and enter new password.
Figure 9 Activate account (1)
Figure 10 Activate account (2)