add password reset actions and strong params