token nil in password_template
redirect backi HTTP_REFERER or defautl url