Make reset PW link dynamic by using req.headers.origin

[lihelennn]

closes #53

Note: only tested locally, so please test on server to make sure a dynamic origin is being populated into the link!