slowly going through entire engine, rechecking implementation & tests
session and password reset tests
fix up password resets
profile and user working