Modified the handler for the password reset to exclude the endpoint url, since that was only needed for constructing the password reset email.
Modified the return object of the password_reset handler to be a user.  Since that is what it really should have been to begin with.
Modified handler for activate_user to exclude end_point_url.