fixed front end for password reset