add get/post handlers for resetPassword