add support for resetting a user's password