update header
finish auth
reset password option