password_reset_confirm without vendor.js to fix bug