add functionality to allow a user to reset their password, add specs also