No need for a header on the password reset page. Its as bare bones as it comes and no nav is needed and its not visited often or for long. If you really want your header on the reset password page and are unsure how to dynamically not redirect just detach the header on that page and delete all redirect wf actions on that page.