auth: migrating password reset to native scheme