Fix forgot-password-link deployment.

There were a few things I missed when testing:
 * I had to fix the migration revision sha due to another branch
 * I had to add a CSRF token to the forms (since they don't use AJAX)

I also went ahead and put the reset link on a newline. I figured this
would make the e-mails a little easier to read.