test for password reset