Make the 'reset password' URL sent in the email use the ROOT_URL_SCHEME in the same way as other links generated for external use.
(I believe there are improvements to Rails, especially in >=3.1, that allow this to be done in a cleaner way, so we will revisit this.)