work started on password reset