add password_resettable concern