REST service refactoring. more to go.
initial password reset functionality