fixed bad bug in password reset