https://marcmylemans.github.io/posts/SecureSelfServiceADPasswordReset/