finishing touches on password resets