The password recovery page which should be used in the email. Only URLs on registered clients are allowed (see also admin.clients.new()). This parameter is a template which contains two variables: %sid% and %pin% which are the session id and the password recovery PIN respectively. The latter can be used instead of the old password in user.password.change().