bug fix password reset