refactor, change resetPassword interface from id to nickorphone
because id might be unavailable if not logged in