fix passwordReset page bugs, add more constaints