create new password is now functional