Allows a newly created user to set their password using a one-time setup token.

POST /users/set-password/