make reset password URI a method for subclassing