[Identity] Enhance forgot password api with return url validations

[dkarkanas]

Description

We need to have the same validation logic we have in the web interface for the forgot-password url creation, where the server validates the endpoint.