Forgot-password flow for Apercu's admin accounts, plus the email delivery path that sends the reset link.
Admin accounts (the ones managing events, speakers, and blog content) needed a self-service recovery path rather than requiring a manual database fix whenever a password was lost.
Email sending goes through Gmail SMTP via a small `text_mail.py` helper, triggered on a reset request and consumed by a time-limited reset link.
This became part of the core admin auth surface that later got API-key middleware layered on top, protecting every endpoint except docs and login.