no more auth on reset pass