add password reset, display attachments