(1) Fixed PasswordReset/reset-password.html so it doesn't lose the resetToken parameter when redirecting from http to https
(2) Changed PasswordReset/reset-password.html so it attempts redirect when running locally also
.