finished password reset functions. fix error in params.update url.