allow password resets to be performed when site is not public by adding routes into white list

services/web/app/coffee/Features/PasswordReset/PasswordResetRouter.coffee

@@ -1,11 +1,14 @@
 PasswordResetController = require("./PasswordResetController")
+AuthenticationController = require('../Authentication/AuthenticationController')
 
 module.exports =
 	apply: (app) ->
 
 		app.get  '/user/password/reset', PasswordResetController.renderRequestResetForm
 		app.post  '/user/password/reset', PasswordResetController.requestReset
+		AuthenticationController.addEndpointToLoginWhitelist '/user/password/reset'
 		
 		app.get '/user/password/set', PasswordResetController.renderSetPasswordForm
 		app.post '/user/password/set', PasswordResetController.setNewUserPassword
+		AuthenticationController.addEndpointToLoginWhitelist '/user/password/set'