uploads and password reset