working on supporting password reset - not tested yet