switched to getting back security question on reset password unique url
param check, as that will be what's needed for the model