Week4

complete week4 code including password reset
Tiny nitpick, always try to pass in `object.id` instead of the literal values like `1` or `2`.