reset password assignment, refactor with virtual resources to avoid jam actions in user controller