improved tests of password reset