password reset bugs