fix auth
fix reset password