sort of usable password reset infrastructure