make reset password work with endpoint