wrote tests reseting password after clicking token link