Case sensitivity in URL's is interesting.
Personally, I would prefer to see standard lower-camel-case used ("passwordReset"). In my opinion, this should also be the same as "passwordreset".
My argument here is:
1. DNS itself is not case sensitive. We can argue over the historical context of why, but the facts are the facts.
2. Given that DNS is case insensitive, I don't like have the path segments be case sensitive either. It always feels "weird" to say: "This part URL is case insensitive, but these other parts are not".
3. Standard JSON is lower camel case. APIs seem to do quite a bit of JSON these days, and why have two standards?
4. It's somewhat unusual to me to see an "_" in a path. Not that it doesn't happen, I just don't see it often.
5. The "-" model, sometimes called snake-casing, is ok, but seems weird. Why have yet another casing standard in your API when just one would do?
Cheers,
Chris