fixed password reset not being possible without login