For #2, it's probably possible if IIS rules are what you're using. You could work around it by using the same IIS rule for the api/v2/ subfolder under your track install. Currently that path is only used for the mobile app.
Trouble logging in? Simply enter your email address OR username in order to reset your password.
For faster and more reliable delivery, add firstname.lastname@example.org to your trusted senders list in your email software.