In 4.0.60, when users are sent a password reset link, the host (first) portion of the URL is missing.

For example, it will say: "Please click the following link to reset your password: /Account/ResetPassword/123456"

Instead of the necessary: "/Account/ResetPassword/123456"