fixed infinite redirect after resetting password