issue #2, for restore-password