new tests for password reset