Fix: empty $key on the reset_url