fixing password reset. Moving logic from User to UserEmailLogin