fix #4 - add a simple to reset password when user is logged in