moved password reset email body to template