removed main url from password reset