added SQL to reset password