fixed reset password token problem