better errors for resetting password