password reset link being sent as HTTP?

Your site is probably marked down as

http://youdomain
goto Settings and change
WordPress Address (URL)
from http://yourdomain to
https://yourdomain
Site Address (URL)
from http://yourdomain to
https://yourdomain