RESTful Password Resetting

I’m using the restful_authentication plugin at the moment, and need to
add support for resetting forgotten passwords. There’s plenty of good
code snippets here,

I’m just wondering, mostly as an exercise, how to RESTfully model the
password resetting. Perhaps a “Password” singleton resource hanging
off the User? Maybe it’s a little more trouble than it’s worth. Any
other approaches?