updated the reset password to accept hash