added exception helper for password reset/password change
moved validation logic from controller to model for password reset and password change on user