add password-reset tests