updated reset password with prepared statements