close #193 (downcasing) and close #194 password reset (needed confirmation)