reset password bugfix

fixed a bug where the new reset password wasnt saved in the database as
a hash