[UPDATE 2] reset password handled in front end