working password reset closes #3