fix password reset urls
allow admin to send password reset link