redirect_url required but not permitted in strong parameters

[Rush]

I am trying to implement the password reset flow as described here: https://github.com/lynndylanhurley/devise_token_auth/wiki/Reset-Password-Flow

The offending piece of code is here:
https://github.com/lynndylanhurley/devise_token_auth/blob/master/app/controllers/devise_token_auth/passwords_controller.rb#L226

As the flow requires to send redirect_url as part of the reset password request, it always fails with:

ActionController::UnpermittedParameters: found unpermitted parameter: redirect_url
    /home/rush/.rvm/gems/ruby-2.3.3@global/gems/actionpack-5.0.1/lib/action_controller/metal/strong_parameters.rb:734:in `unpermitted_parameters!'
    /home/rush/.rvm/gems/ruby-2.3.3@global/gems/actionpack-5.0.1/lib/action_controller/metal/strong_parameters.rb:398:in `permit'
    /home/rush/.rvm/gems/ruby-2.3.3/gems/devise_token_auth-0.1.39/app/controllers/devise_token_auth/passwords_controller.rb:226:in `resource_params'
    /home/rush/.rvm/gems/ruby-2.3.3/gems/devise_token_auth-0.1.39/app/controllers/devise_token_auth/passwords_controller.rb:9:in `create'
    /home/rush/.rvm/gems/ruby-2.3.3@global/gems/actionpack-5.0.1/lib/action_controller/metal/basic_implicit_render.rb:4:in `send_action'

Any tips on a non-hacky solution?