Added browser-friendly wrapper pages for the two-stage password reset and updated templates to send out those URLs instead of the direct API links.