Approve resets before they land.

Students hit Forgot password — you approve here, copy the link, and it goes out via Resend.