Issues #591, #594, #691, and #692 define HTTP API work, so their implementation belongs in the Settlement API, not this Soroban-contract repository.
The implementation is proposed in dupdap-backend#269. It adds password-reset tokens, authentication throttling, admin waitlist approval/filtering, and unsubscribe-aware waitlist campaign preview/send reporting.