bug fixes for password resets