The v2 /user/password/token operation description claimed the response is the same whether or not an account exists, but the endpoint returns 404 for an unknown email. Correct the description to match actual behavior.