you could probably get rid of the token encoding stuff by making this Get["/resetpassword/{user}/{id}"]