fixed - corrected password reset validation rules