finish the password reset flow