-added security around rest service for users
-that broke links
-fixed links, but resetting password not saving new password