bugfix: reset password