Password reset works - who knows there those flash messages go? maybe lost in the session that is not allowed to be created .. I dunno