fix wrong url in reset password api