test if user is logged in for before reset pwd
fix typo html, finalize change password