urls fix for password change and reset