diff --git a/internal/api/admin_users.go b/internal/api/admin_users.go
index 7d5e6b64..491f08cb 100644
--- a/internal/api/admin_users.go
+++ b/internal/api/admin_users.go
@@ -7,9 +7,9 @@ import (
 	"time"
 
 	"github.com/go-chi/chi/v5"
-	"github.com/jackc/pgconn"
 	"github.com/jackc/pgerrcode"
 	"github.com/jackc/pgx/v5"
+	"github.com/jackc/pgx/v5/pgconn"
 	"golang.org/x/crypto/bcrypt"
 
 	"git.fabledsword.com/bvandeusen/minstrel/internal/audit"
diff --git a/web/src/routes/admin/integrations/+page.svelte b/web/src/routes/admin/integrations/+page.svelte
index 8ef6d5e1..2796eb0d 100644
--- a/web/src/routes/admin/integrations/+page.svelte
+++ b/web/src/routes/admin/integrations/+page.svelte
@@ -594,7 +594,7 @@
       <input id="smtp-from-name" type="text" bind:value={smtpForm.from_name}
              class="mt-1 w-full rounded-md border border-border bg-background px-3 py-2 font-mono text-sm text-text-primary placeholder:text-text-muted focus:outline-none focus:ring-2 focus:ring-accent" />
 
-      <label class="text-sm text-text-secondary">TLS</label>
+      <span class="text-sm text-text-secondary">TLS</span>
       <label class="flex items-center gap-2 text-sm">
         <input type="checkbox" bind:checked={smtpForm.use_tls} />
         Use STARTTLS
diff --git a/web/src/routes/reset-password/[token]/+page.svelte b/web/src/routes/reset-password/[token]/+page.svelte
index 2854e3ed..6e62f8d2 100644
--- a/web/src/routes/reset-password/[token]/+page.svelte
+++ b/web/src/routes/reset-password/[token]/+page.svelte
@@ -9,11 +9,15 @@
   let submitting = $state(false);
   let error = $state<string | null>(null);
 
-  const token = $derived(page.params.token);
+  const token = $derived(page.params.token ?? '');
 
   async function onSubmit(e: SubmitEvent) {
     e.preventDefault();
     error = null;
+    if (!token) {
+      error = 'This reset link is invalid. Request a new one.';
+      return;
+    }
     if (newPassword !== confirmPassword) {
       error = 'Passwords do not match.';
       return;