Fix protocol in reset password email

Use X-Forwarded-Proto header, if present, as scheme for base url.