allow users to reset password with username