rewrite forgot/reset password using virtual resources