Wrong password and reset refused

A reset needs a held key, a key comes from signing in, and signing in needs the right password. To break the loop, send the key the node already gave the account:

{ "node": "pep", "auth": { "api_key": "pep_ak_..." } }