updated the password reset to use hash and sha256