password reset bug fixes