a couple more tests for password reset