fix reset user's password method