add express.compress()
add password reset
fix random password