feat(auth): add password reset page