Don't hardcode https protocol in password reset email.

Use http or https, depending on the value of `is_secure`.
This is similar to how links in some other email templates work.
Merge pull request #3147 from mtyaka/password-reset-email-http

Don't hardcode https protocol in password reset email.