When sending a password reset email using the sendResetPassword function, how can I properly construct the reset link to redirect the user to my frontend application for password reset, while ensuring that the underlying authentication process (e.g., token validation) is handled securely by my backend, given that my frontend and backend (auth) applications are on different URLs? Why might this specific function behave differently from my other email-sending functions concerning callback URLs?