add password resets and account activation