improving password reset mechanism