Updated routes to provide token in password reset