make admin reset password its own action and page
ignore production database php file
remove unnecessary log statements