add find password method
fix bug: new password can not be none
merge from findpassword/reset passwd