not testing password reset until test endpoint works