Update recoverable.py

Fixed invalid url when app used on subpath, e.g. 'http://localhost/api'. There are links with doubled 'api': "http://localhost/api/api/reset_password/TOKEN"