added notes about password_resets