In 4.0.60, when users are sent a password reset link, the host (first) portion of the URL is missing.
For example, it will say: "Please click the following link to reset your password: /Account/ResetPassword/123456"
Instead of the necessary: "https://acre.hifis.site/Account/ResetPassword/123456"

Fixed in 4.0.60.3