password reset controller duplication fixed