fixed password reset workflow