Use validation request for 'auth/reset' get/post

[rdok]

Currently the system will throw an exception when a user get/posts to this route.