add password reset controller