adding client auth to the password reset api calls