add support for resetting a users password