password reset test are wprlong but need more robustness