finish user password reset