User challenges for password reset

Here we should document how will challenges work

Edited by Pietro Saccardi