fixes to password reset