enhance security on password reset rquest function