changes to password reset, needs more work