alter complete_reset_password to handle email and token params, plus out...

...put link from mail helper

This makes the route consistent with the link we generate. Bonus: output link for easier testing.

r? @dannycoates