add password reset and email confirmation