implement confirmation and reset password