update login with password reset and header