added redirect on password reset