Password reset process - needs a fix

[induslady]

The password reset process we currently have in our site is as follows:

1. In the Login window, clicking on Forgot username / password link goes here:
/forums/login.php?do=lostpw
Asking the user to enter their registered email address

2. On entering the email address, the username and instructions for password resetting gets sent to the email.

3. Clicking on the password reset link, the username and new password gets sent along with edit password link to the profile:
/forums/profile.php?do=editpassword

What is happening is the edit password link to the profile page is very misleading to the users. Instead of logging in with the username and the (reset)password, most of them try to click on the link directly (for editing the password) and get the 'no permission to access this page', because they aren't logged in.

Is there a way that in the email we send ONLY username and the new(reset) password? No link to edit password.

And when the user logs in with the username and temporary password, is it possible to get them redirected to the edit password in profile page.