Add password reset routes explicitly (these were lost when we added the default 404 route)