Resetting Passwords MUST be hashed when saved