whitelisted reset password token for strong parameters
remove 'helper' code for employee codes in lieu of text field since we expose them now for admins to test anyhow
refactored models and controllers to fit ios app