password reset working as expected