Yesterday I heard back from my client, and he is happy for me to make the relevant changes. That said, my client has said not to worry about the ability to reset passwords at this point. I will  put a ‘link’ into my app for this but will not prioritise it as a working element. I am now liaising with my client to arrange my second round of user testing.