validation stuff
password reset emails
updated TODO