remove 'branding' from email confirmations
index into user for password reset code