add reset password and verify