improved testing for password reset