remove route for reset_password