make reaset password URI a method for subclassing