all tests are passing, reset token needs to be tested