Fixes bug with password reset

The passwdrecover url doesn't have to end in a slash, but the code was
assuming the slash was always there. This commit changes it so that a
slash is added if it is missing.