fix ajax links so they respect open in new tab/window
password reset is supposed to let user change their password. it now does that