fixed bug in new password form